4.3
CVSSv2

CVE-2020-16843

Published: 04/08/2020 Updated: 19/08/2020
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 5.9 | Impact Score: 3.6 | Exploitability Score: 2.2
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

In Firecracker 0.20.x prior to 0.20.1 and 0.21.x prior to 0.21.2, the network stack can freeze under heavy ingress traffic. This can result in a denial of service on the microVM when it is configured with a single network interface, and an availability problem for the microVM network interface on which the issue is triggered.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

amazon firecracker 0.20.0

amazon firecracker 0.21.0

amazon firecracker 0.21.1