VulnerabilityModified
CVE-2020-16843
This can result in a denial of service on the microVM when it is configured with a single network interface, and an availability problem for the microVM network interface on which the issue is triggered.
MEDIUM 5.9EPSS 1.67%
Does this matter?
Lower severity and a low EPSS score (1.67%). Track it; it rarely justifies an emergency change on its own.
Description
In Firecracker 0.20.x before 0.20.1 and 0.21.x before 0.21.2, the network stack can freeze under heavy ingress traffic. This can result in a denial of service on the microVM when it is configured with a single network interface, and an availability problem for the microVM network interface on which the issue is triggered.
- CVSS 3.1
- 5.9 MEDIUMCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 1.67% probability · 76th percentile
- CISA KEV
- Not listed
- Affected
- amazon/firecracker
- Source
- cve@mitre.org
References
- http://www.openwall.com/lists/oss-security/2020/08/13/1Mailing List, Third Party Advisory
- https://github.com/firecracker-microvm/firecracker/issues/2057Mitigation, Third Party Advisory
- https://www.openwall.com/lists/oss-security/2020/08/13/1Mailing List, Third Party Advisory
- http://www.openwall.com/lists/oss-security/2020/08/13/1Mailing List, Third Party Advisory
- https://github.com/firecracker-microvm/firecracker/issues/2057Mitigation, Third Party Advisory
- https://www.openwall.com/lists/oss-security/2020/08/13/1Mailing List, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.