CVE-2024-32668: bhyve(8) privileged guest escape via USB controller
An insufficient boundary validation in the USB code could lead to an out-of-bounds write on the heap, with data controlled by the caller.
A malicious, privileged software running in a guest VM can exploit the vulnerability to achieve code execution on the host in the bhyve userspace process, which typically runs as root. Note that bhyve runs in a Capsicum sandbox, so malicious code is constrained by the capabilities available to the bhyve process.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-32668?
The severity of CVE-2024-32668 is critical as it allows for code execution on the host via an out-of-bounds write.
How do I fix CVE-2024-32668?
To fix CVE-2024-32668, it is recommended to apply the latest security patches provided by FreeBSD.
Which software versions are affected by CVE-2024-32668?
CVE-2024-32668 affects FreeBSD versions from 13.0 to 14.1, including certain point releases and betas.
Who can exploit CVE-2024-32668?
A privileged software running in a guest VM can exploit CVE-2024-32668 to execute code on the host.
What is the attack vector for CVE-2024-32668?
The attack vector for CVE-2024-32668 involves insufficient boundary validation in the USB code.