Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vq9r-cp35-p48q

Опубликовано: 28 янв. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing. Some of these variables are written to with guest controlled data, of guest controllable size. That size can be larger than the variable, and bounding of the writes was missing.

Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing. Some of these variables are written to with guest controlled data, of guest controllable size. That size can be larger than the variable, and bounding of the writes was missing.

EPSS

Процентиль: 2%
0.00013
Низкий

8.8 High

CVSS3

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 8.8
ubuntu
11 дней назад

Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing. Some of these variables are written to with guest controlled data, of guest controllable size. That size can be larger than the variable, and bounding of the writes was missing.

CVSS3: 8.8
nvd
11 дней назад

Shadow mode tracing code uses a set of per-CPU variables to avoid cumbersome parameter passing. Some of these variables are written to with guest controlled data, of guest controllable size. That size can be larger than the variable, and bounding of the writes was missing.

CVSS3: 8.8
debian
11 дней назад

Shadow mode tracing code uses a set of per-CPU variables to avoid cumb ...

suse-cvrf
11 дней назад

Security update for xen

suse-cvrf
12 дней назад

Security update for xen

EPSS

Процентиль: 2%
0.00013
Низкий

8.8 High

CVSS3

Дефекты

CWE-787