Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vq9r-cp35-p48q

Опубликовано: 28 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing. Some of these variables are written to with guest controlled data, of guest controllable size. That size can be larger than the variable, and bounding of the writes was missing.

Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing. Some of these variables are written to with guest controlled data, of guest controllable size. That size can be larger than the variable, and bounding of the writes was missing.

EPSS

Процентиль: 3%
0.0013
Низкий

8.8 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 8.8
ubuntu
7 месяцев назад

Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing. Some of these variables are written to with guest controlled data, of guest controllable size. That size can be larger than the variable, and bounding of the writes was missing.

CVSS3: 8.8
nvd
7 месяцев назад

Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing. Some of these variables are written to with guest controlled data, of guest controllable size. That size can be larger than the variable, and bounding of the writes was missing.

CVSS3: 8.8
debian
7 месяцев назад

Shadow mode tracing code uses a set of per-CPU variables to avoid cumb ...

suse-cvrf
7 месяцев назад

Security update for xen

suse-cvrf
7 месяцев назад

Security update for xen

EPSS

Процентиль: 3%
0.0013
Низкий

8.8 High

CVSS3

Дефекты

CWE-787