95 matches found
CVE-2020-16843: Undefined Security Weakness
In Firecracker 0.20.x before 0.20.1 and 0.21.x before 0.21.2, the network stack can freeze under heavy ingress traffic. This can result in a denial of service on the microVM when it is configured with a single network interface, and an availability problem for the microVM network interface on whi...
CVE-2020-2025
Kata Containers before 1.11.0 on Cloud Hypervisor persists guest filesystem changes to the underlying image file on the host. A malicious guest can overwrite the image file to gain control of all subsequent guest VMs. Since Kata Containers uses the same VM image file with all VMMs, this issue may...
Design/Logic Flaw
Kata Containers before 1.11.0 on Cloud Hypervisor persists guest filesystem changes to the underlying image file on the host. A malicious guest can overwrite the image file to gain control of all subsequent guest VMs. Since Kata Containers uses the same VM image file with all VMMs, this issue may...
CVE-2020-2025 Kata Containers - Cloud Hypervisor guests persist filesystem changes to the underlying host image file
Kata Containers before 1.11.0 on Cloud Hypervisor persists guest filesystem changes to the underlying image file on the host. A malicious guest can overwrite the image file to gain control of all subsequent guest VMs. Since Kata Containers uses the same VM image file with all VMMs, this issue may...
CVE-2020-2025: Improper Access Control
Kata Containers before 1.11.0 on Cloud Hypervisor persists guest filesystem changes to the underlying image file on the host. A malicious guest can overwrite the image file to gain control of all subsequent guest VMs. Since Kata Containers uses the same VM image file with all VMMs, this issue may...
Firecracker Buffer Overflow Vulnerability
Firecracker is a miniature virtual machine for serverless computing. A buffer overflow vulnerability exists in Firecracker versions 0.18.0 and 0.19.0. A remote attacker could exploit this vulnerability to cause a denial of service...
CVE-2019-18960
Firecracker vsock implementation buffer overflow in versions 0.18.0 and 0.19.0. This can result in potentially exploitable crashes...
CVE-2019-18960
Firecracker vsock implementation buffer overflow in versions 0.18.0 and 0.19.0. This can result in potentially exploitable crashes...
Design/Logic Flaw
Firecracker vsock implementation buffer overflow in versions 0.18.0 and 0.19.0. This can result in potentially exploitable crashes...
CVE-2019-18960
CVE-2019-18960 affects Firecracker’s vsock implementation, with a buffer overflow in versions 0.18.0 and 0.19.0. The root cause is a vulnerability in the vsock code path that can lead to potentially exploitable crashes. Public sources (NVD/NVD-derived entries and vendor advisories) assign a high ...
CVE-2019-18960
Firecracker vsock implementation buffer overflow in versions 0.18.0 and 0.19.0. This can result in potentially exploitable crashes...
PT-2019-15736
Name of the Vulnerable Software and Affected Versions Firecracker versions 0.18.0 through 0.19.0 Description The issue is related to a buffer overflow in the vsock implementation, which can result in potentially exploitable crashes. Recommendations For versions 0.18.0 and 0.19.0, at the moment,...
CVE-2019-18960: Buffer Copy without Checking Size of Input
Firecracker vsock implementation buffer overflow in versions 0.18.0 and 0.19.0. This can result in potentially exploitable crashes...
Firecracker CVE-2019-18960 Buffer Overflow Vulnerability
Description Firecracker is prone to a buffer-overflow vulnerability. An attacker can exploit this issue to cause the application to crash, denying service to legitimate users. Technologies Affected Firecracker Firecracker 0.18.0 Firecracker Firecracker 0.19.0 Recommendations Block external access...
