Lucene search

K
fedoraFedoraFEDORA:DA7CB20BCC7B
HistoryFeb 14, 2024 - 1:12 a.m.

[SECURITY] Fedora 38 Update: firecracker-1.6.0-6.fc38

2024-02-1401:12:59
lists.fedoraproject.org
4
fedora 38
open source
virtualization
secure
multi-tenant
container
function-based
microvms
hardware virtualization
sandboxing

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.2%

Firecracker is an open source virtualization technology that is purpose-bui lt for creating and managing secure, multi-tenant container and function-based services that provide serverless operational models. Firecracker runs workloads in lightweight virtual machines, called microVMs, which combine t he security and isolation properties provided by hardware virtualization technology with the speed and flexibility of containers. This package does not include all of the security features of an official release. It is not production ready without additional sandboxing.

OSVersionArchitecturePackageVersionFilename
Fedora38anyfirecracker< 1.6.0UNKNOWN

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.4 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

30.2%