medium5.9
CVE-2020-16843
In Firecracker 0.20.x before 0.20.1 and 0.21.x before 0.21.2, the network stack can freeze under heavy ingress traffic.
Impact
In Firecracker 0.20.x before 0.20.1 and 0.21.x before 0.21.2, the network stack can freeze under heavy ingress traffic. This can result in a denial of service on the microVM when it is configured with a single network interface, and an availability problem for the microVM network interface on which the issue is triggered.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amazon | Firecracker | Versions 0.20.0, 0.21.0, 0.21.1 |
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2020/08/13/1
- https://github.com/firecracker-microvm/firecracker/issues/2057
- https://www.openwall.com/lists/oss-security/2020/08/13/1
- http://www.openwall.com/lists/oss-security/2020/08/13/1
- https://github.com/firecracker-microvm/firecracker/issues/2057
- https://www.openwall.com/lists/oss-security/2020/08/13/1