CVE-2021-28706

guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercalls to increase its…

published November 24, 2021

CVSS
—
EPSS
2%
Percentile
82.7
In the wild
Unconfirmed
What it is

guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercalls to increase its memory allocation beyond the administrator established limit. This is a result of a calculation done with 32-bit precision, which may overflow. It would then only be the overflowed (and hence small) number which gets compared against the established upper bound.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02233 · 82.7th percentile
Published
2021-11-24T00:00Z
EPSS history
Timeline
  • 24 NOV 00:00Z
    guests may exceed their designated memory limit When a guest is permitted to have close to 16TiB of memory, it may be able to issue hypercalls to increase its…
    cvelistv5