CVE-2025-8412
LowCVSS 2.0Exploitation Probability (EPSS)
Low risk1th percentile - higher than 1% of all known CVEs
Summary
A classic buffer overflow vulnerability was found in the SUSE Virtual Machine Driver Pack due to copying data without checking input size. An attacker with registry modification capabilities could affect driver integrity. No feasible exploitation method is currently known.
Risk Assessment
The risk for the organization is a potential compromise of the virtual machine driver integrity, which could lead to unpredictable system behavior. However, exploitation requires prior registry access, limiting remote attack vectors.
Recommendation
It is recommended to update the SUSE Virtual Machine Driver Pack to a version containing commit e7a602ec232756ead019bdf19d6d3b9d010cc94b or later. Also monitor the registry for unauthorized changes.
Original NVD description (English source)
A Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in SUSE Virtual Machine Driver Pack allows an attacker with the ability to modify the registry to affect the integrity of the driver. We're not aware of a feasible way to exploit this currently. This issue affects Virtual Machine Driver Pack: before e7a602ec232756ead019bdf19d6d3b9d010cc94b.