https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 14:41:31 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-05217 bdu:2022-05217 https://cve.radiocsirt.org/vuln/bdu:2022-05217 https://cve.radiocsirt.org/vuln/euvd-2026-216006 EUVD-2026-216006 https://cve.radiocsirt.org/vuln/euvd-2026-216006 https://cve.radiocsirt.org/vuln/fkie_cve-2022-23092 <p>The implementation of lib9p&#39;s handling of RWALK messages was missing a bounds check needed when unpacking the message contents. The missing check means that the receipt of a specially crafted message will cause lib9p to overwrite unrelated memory.</p> <p>The bug can be triggered by a malicious bhyve guest kernel to overwrite memory in the bhyve(8) process. This could potentially lead to user-mode code execution on the host, subject to bhyve&#39;s Capsicum sandbox.</p> <p>The implementation of lib9p&#39;s handling of RWALK messages was missing a bounds check needed when unpacking the message contents. The missing check means that the receipt of a specially crafted message will cause lib9p to overwrite unrelated memory.</p> <p>The bug can be triggered by a malicious bhyve guest kernel to overwrite memory in the bhyve(8) process. This could potentially lead to user-mode code execution on the host, subject to bhyve&#39;s Capsicum sandbox.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-23092 https://cve.radiocsirt.org/vuln/ghsa-gvf3-496w-8fm9 <p>The implementation of lib9p&#39;s handling of RWALK messages was missing a bounds check needed when unpacking the message contents. The missing check means that the receipt of a specially crafted message will cause lib9p to overwrite unrelated memory.</p> <p>The bug can be triggered by a malicious bhyve guest kernel to overwrite memory in the bhyve(8) process. This could potentially lead to user-mode code execution on the host, subject to bhyve&#39;s Capsicum sandbox.</p> <p>The implementation of lib9p&#39;s handling of RWALK messages was missing a bounds check needed when unpacking the message contents. The missing check means that the receipt of a specially crafted message will cause lib9p to overwrite unrelated memory.</p> <p>The bug can be triggered by a malicious bhyve guest kernel to overwrite memory in the bhyve(8) process. This could potentially lead to user-mode code execution on the host, subject to bhyve&#39;s Capsicum sandbox.</p> https://cve.radiocsirt.org/vuln/ghsa-gvf3-496w-8fm9 https://cve.radiocsirt.org/vuln/gsd-2022-23092 gsd-2022-23092 https://cve.radiocsirt.org/vuln/gsd-2022-23092