Vulnerability Details CVE-2016-1889
Integer overflow in the bhyve hypervisor in FreeBSD 10.1, 10.2, 10.3, and 11.0 when configured with a large amount of guest memory, allows local users to gain privilege via a crafted device descriptor.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 12.9%
CVSS Severity
CVSS v3 Score 7.8
CVSS v2 Score 7.2
Products affected by CVE-2016-1889
-
cpe:2.3:o:freebsd:freebsd:10.1
-
cpe:2.3:o:freebsd:freebsd:10.2
-
cpe:2.3:o:freebsd:freebsd:10.3
-
cpe:2.3:o:freebsd:freebsd:11.0