# CVE-2024-8178

## Summary

- **CVE ID:** CVE-2024-8178
- **Severity:** UNKNOWN
- **CVSS Score:** 0.12
- **CWE:** CWE-908, CWE-909
- **Published:** Sep 5, 2024
- **Last Modified:** Mar 13, 2026

## Description

The ctl_write_buffer and ctl_read_buffer functions allocated memory to be returned to userspace, without initializing it.

Malicious software running in a guest VM that exposes virtio_scsi can exploit the vulnerabilities to achieve code execution on the host in the bhyve userspace process, which typically runs as root.  Note that bhyve runs in a Capsicum sandbox, so malicious code is constrained by the capabilities available to the bhyve process.  A malicious iSCSI initiator could achieve remote code execution on the iSCSI target host.

## Affected Products

- FreeBSD — FreeBSD (14.1-RELEASE)
- FreeBSD — FreeBSD (14.0-RELEASE)
- FreeBSD — FreeBSD (13.3-RELEASE)

## References

- [CNA](https://security.freebsd.org/advisories/FreeBSD-SA-24:11.ctl.asc)
- [CVE](https://security.netapp.com/advisory/ntap-20240920-0010/)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.60%
- **EPSS Percentile:** 46.8

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._