CVE-2016-1889

Integer overflow in the bhyve hypervisor in FreeBSD 10.1, 10.2, 10.3, and 11.0 when configured with a large amount of guest memory, allows local users to gain privilege via a crafted device descriptor.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2017-02-15

Last modified

2024-08-05

Weaknesses

CWE-190

Affected products

• Freebsd (Freebsd)

References

• http://www.securitytracker.com/id/1037400
• https://www.freebsd.org/security/advisories/FreeBSD-SA-16:38.bhyve.asc