CVE-2023-30612

MEDIUM Year: 2023
CVSS v3 Score
4.9
Medium
Weakness Type
CWE-306
View all →

Vulnerability Description

Cloud hypervisor is a Virtual Machine Monitor for Cloud workloads. This vulnerability allows users to close arbitrary open file descriptors in the Cloud Hypervisor process via sending malicious HTTP request through the HTTP API socket. As a result, the Cloud Hypervisor process can be easily crashed, causing Deny-of-Service (DoS). This can also be a potential Use-After-Free (UAF) vulnerability. Users require to have the write access to the API socket file to trigger this vulnerability. Impacted versions of Cloud Hypervisor include upstream main branch, v31.0, and v30.0. The vulnerability was initially detected by our `http_api_fuzzer` via oss-fuzz. This issue has been addressed in versions 30.1 and 31.1. Users unable to upgrade may mitigate this issue by ensuring the write access to the API socket file is granted to trusted users only.

Related Vulnerabilities

CVE-2019-20105

MEDIUM
CVSS:4.9(Medium)

The EditApplinkServlet resource in the Atlassian Application Links plugin before version 5.4.20, from version 6.0.0 before version 6.0.12, from version 6.1.0 before version 6.1.2, from version 7.0.0 b...

CWE-3062019

CVE-2020-19670

MEDIUM
CVSS:4.9(Medium)

In Niushop B2B2C Multi-Business Basic Edition V1.11, authentication can be bypassed, causing administrators to reset any passwords.

CWE-3062020

CVE-2021-32659

MEDIUM
CVSS:4.9(Medium)

Matrix-appservice-bridge is the bridging service for the Matrix communication program's application services. In versions 2.6.0 and earlier, if a bridge has room upgrade handling turned on in the conf...

CWE-3062021

CVE-2021-32709

MEDIUM
CVSS:4.9(Medium)

Shopware is an open source eCommerce platform. Creation of order credits was not validated by ACL in admin orders. Users are recommend to update to the current version 6.4.1.1. You can get the update ...

CWE-3062021

CVE-2024-57055

MEDIUM
CVSS:5.0(Medium)

Server-Side Access Control Bypass vulnerability in WombatDialer before 25.02 could allow unauthorized users to potentially call certain services without the necessary access level. This issue is limit...

CWE-3062024

CVE-2020-4471

MEDIUM
CVSS:4.8(Medium)

IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow an unauthenticated attacker to cause a denial of service or hijack DNS sessions by send a specially crafted HTTP command to the remote serve...

CWE-3062020