Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2021-28706

Опубликовано: 24 нояб. 2021
Источник: ubuntu
Приоритет: medium
EPSS Низкий
CVSS2: 7.8
CVSS3: 8.6

Описание

guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercalls to increase its memory allocation beyond the administrator established limit. This is a result of a calculation done with 32-bit precision, which may overflow. It would then only be the overflowed (and hence small) number which gets compared against the established upper bound.

РелизСтатусПримечание
bionic

ignored

end of standard support, was needs-triage
devel

needs-triage

esm-apps/focal

needs-triage

esm-apps/jammy

needs-triage

esm-apps/noble

needs-triage

esm-infra-legacy/trusty

DNE

esm-infra/bionic

needs-triage

esm-infra/xenial

needs-triage

focal

ignored

end of standard support, was needs-triage
hirsute

ignored

end of life

Показывать по

EPSS

Процентиль: 37%
0.00155
Низкий

7.8 High

CVSS2

8.6 High

CVSS3

Связанные уязвимости

CVSS3: 8.6
nvd
около 4 лет назад

guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercalls to increase its memory allocation beyond the administrator established limit. This is a result of a calculation done with 32-bit precision, which may overflow. It would then only be the overflowed (and hence small) number which gets compared against the established upper bound.

CVSS3: 8.6
debian
около 4 лет назад

guests may exceed their designated memory limit When a guest is permit ...

CVSS3: 8.6
github
больше 3 лет назад

guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercalls to increase its memory allocation beyond the administrator established limit. This is a result of a calculation done with 32-bit precision, which may overflow. It would then only be the overflowed (and hence small) number which gets compared against the established upper bound.

suse-cvrf
около 4 лет назад

Security update for xen

suse-cvrf
около 4 лет назад

Security update for xen

EPSS

Процентиль: 37%
0.00155
Низкий

7.8 High

CVSS2

8.6 High

CVSS3