A vulnerability was found in ACRN up to 2.4. It has been declared as critical. Affected by this vulnerability is the function dmar_free_irte of the file hypervisor/arch/x86/vtd.c. Upgrading to version 2.5 eliminates this vulnerability. Applying a patch is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.
ACRN up to 2.4 vtd.c dmar_free_irte buffer overflow
- Virtual Patching
- July 3, 2021
- 7:04 am
- Virtual Patching
- July 3, 2021
- 7:04 am
Common Vulnerabilityies and Exposures
Contact us to get started
CVE-2023-2825 : GITLAB COMMUNITY EDITION/ENTERPRISE EDITION 16.0.0 PUBLIC PROJECT PATH TRAVERSAL
Description An issue has been discovered in GitLab CE/EE affecting only version 16.0.0. An unauthenticated malicious user can use a
CVE-2023-2851 : AGT TECH CEPPATRON SQL INJECTION
Description Improper Neutralization of Special Elements used in an SQL Command (‘SQL Injection’) vulnerability in AGT Tech Ceppatron allows Command
CVE-2023-2868 : BARRACUDA EMAIL SECURITY GATEWAY UP TO 9.2.0.006 TAR FILE COMMAND INJECTION
Description A remote command injection vulnerability exists in the Barracuda Email Security Gateway (appliance form factor only) product effecting versions