Medium severity · published Feb 20, 2023
CVE-2021-32847
HyperKit is a toolkit for embedding hypervisor capabilities in an application
6.5
CVSS
0.4%
EPSS
No
On KEV
Description
HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior, a malicious guest can trigger a vulnerability in the host by abusing the disk driver that may lead to the disclosure of the host memory into the virtualized guest. This issue is fixed in commit cf60095a4d8c3cb2e182a14415467afd356e982f.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HY
Hyperkit · Mobyproject
through 0.20210107 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2021-32847
CVE.org
https://www.cve.org/CVERecord?id=CVE-2021-32847
Exploit
https://github.com/moby/hyperkit/blob/2f061e447e1435cdf1b9eda364cea6414f2c606b/src/lib/pci_virtio_block.c#L316
Patch
https://github.com/moby/hyperkit/commit/cf60095a4d8c3cb2e182a14415467afd356e982f
Exploit
https://securitylab.github.com/advisories/GHSL-2021-058-moby-hyperkit/
More from Hyperkit
7.8
CVE-2021-32846
HyperKit is a toolkit for embedding hypervisor capabilities in an application
7.8
CVE-2021-32845
HyperKit is a toolkit for embedding hypervisor capabilities in an application
5.5
CVE-2021-32844
HyperKit is a toolkit for embedding hypervisor capabilities in an application
5.5
CVE-2021-32843
HyperKit is a toolkit for embedding hypervisor capabilities in an application