critical9.8
CVE-2019-18960
Firecracker vsock implementation buffer overflow in versions 0.18.0 and 0.19.0.
Impact
Firecracker vsock implementation buffer overflow in versions 0.18.0 and 0.19.0. This can result in potentially exploitable crashes.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amazon | Firecracker | Versions 0.18.0, 0.19.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2019/12/10/1
- http://www.openwall.com/lists/oss-security/2022/09/11/2
- https://github.com/firecracker-microvm/firecracker/issues/1462
- https://github.com/firecracker-microvm/firecracker/releases
- https://github.com/firecracker-microvm/firecracker/releases/tag/v0.18.1
- https://github.com/firecracker-microvm/firecracker/releases/tag/v0.19.1
- http://www.openwall.com/lists/oss-security/2019/12/10/1
- http://www.openwall.com/lists/oss-security/2022/09/11/2
- https://github.com/firecracker-microvm/firecracker/issues/1462
- https://github.com/firecracker-microvm/firecracker/releases
- https://github.com/firecracker-microvm/firecracker/releases/tag/v0.18.1
- https://github.com/firecracker-microvm/firecracker/releases/tag/v0.19.1