CVE-2021-32843 - CVE House
Back to Database
Status published Medium CVE-2021-32843

HyperKit is a toolkit for embedding hypervisor capabilities in an...

Vulnerability Description

HyperKit is a toolkit for embedding hypervisor capabilities in an application. In versions 0.20210107 and prior of HyperKit, `virtio.c` has is a call to `vc_cfgread` that does not check for null which when called makes the host crash. This issue may lead to a guest crashing the host causing a denial of service. This issue is fixed in commit df0e46c7dbfd81a957d85e449ba41b52f6f7beb4.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-32843

Credits & Attribution

No credits recorded in the NVD database.

References

More from moby

View All →
CVE-2025-54410
Moby's Firewalld reload removes bridge network isolation
Low 3.3
CVE-2025-54388
Moby's Firewalld reload makes published container ports accessible from remote hosts
Medium 5.1
CVE-2024-41110
Moby authz zero length regression
Critical 10
CVE-2024-32473
Moby IPv6 enabled on IPv4-only network interfaces
Medium 4.7
CVE-2024-29018
External DNS requests from 'internal' networks could lead to data exfiltration
Medium 5.9

Affected Vendor

Affected Software

hyperkit
Vulnerable Versions:
0.20210107

Timeline

Official Publish: February 17th, 2023
Last Modified: March 10th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

CWE-476

MITRE ATT&CK TTPs

T1499 Endpoint Denial of Service
Impact
T1499.004 Application or System Exploitation
Impact
T1489 Service Stop
Impact
T1203 Exploitation for Client Execution
Execution
T1190 Exploit Public-Facing Application
Initial Access