CVE-2024-51565 bhyve(8) hda driver buffer over-read
A buffer over-read in the FreeBSD bhyve hda driver allows guest-controlled values to cause memory corruption, potentially leading to denial of service or information disclosure.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-51565?
CVE-2024-51565 is a medium-severity memory corruption vulnerability in FreeBSD, published on 12 Nov 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The hda driver is vulnerable to a buffer over-read from a guest-controlled value.
Weakness: CWE-125
Which versions are affected by CVE-2024-51565?
How do I fix CVE-2024-51565?
No fix has been published for CVE-2024-51565 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2024-51565 being exploited?
There is no known exploitation of CVE-2024-51565 in the wild and no public exploit code.
Sources
Also known as GHSA-hx7r-qwxv-w9j9.