EPSS
Percentile
20.7%
github.com/moby/hyperkit is vulnerable to Information Disclosure. The vulnerability exists in the pci_vtblk_proc function of pci_virtio_block.c, which leads to the disclosure of host memory into the virtualized guest.
pci_vtblk_proc
pci_virtio_block.c
github.com/moby/hyperkit/blob/2f061e447e1435cdf1b9eda364cea6414f2c606b/src/lib/pci_virtio_block.c#L316
github.com/moby/hyperkit/commit/cf60095a4d8c3cb2e182a14415467afd356e982f
github.com/moby/hyperkit/pull/318
securitylab.github.com/advisories/GHSL-2021-058-moby-hyperkit/