- EPSS 0.01%
- Veröffentlicht 23.01.2026 20:25:02
- Zuletzt bearbeitet 30.01.2026 16:57:56
A UNIX symbolic link following issue in the jailer component in Firecracker version v1.13.1 and earlier and 1.14.0 on Linux may allow a local host user with write access to the pre-created jailer directories to overwrite arbitrary host files via a s...
CVE-2020-27174
- EPSS 0.56%
- Veröffentlicht 16.10.2020 05:15:11
- Zuletzt bearbeitet 21.11.2024 05:20:49
In Amazon AWS Firecracker before 0.21.3, and 0.22.x before 0.22.1, the serial console buffer can grow its memory usage without limit when data is sent to the standard input. This can result in a memory leak on the microVM emulation thread, possibly o...
CVE-2020-16843
- EPSS 0.5%
- Veröffentlicht 04.08.2020 20:15:12
- Zuletzt bearbeitet 21.11.2024 05:07:15
In Firecracker 0.20.x before 0.20.1 and 0.21.x before 0.21.2, the network stack can freeze under heavy ingress traffic. This can result in a denial of service on the microVM when it is configured with a single network interface, and an availability p...
CVE-2019-18960
- EPSS 2.09%
- Veröffentlicht 11.12.2019 13:15:11
- Zuletzt bearbeitet 21.11.2024 04:33:55
Firecracker vsock implementation buffer overflow in versions 0.18.0 and 0.19.0. This can result in potentially exploitable crashes.