Database/Container, Kubernetes & orchestration
Firecracker: vsock buffer overflow producing potentially exploitable crashes
CVSS 9.8CVE-2019-18960Container, Kubernetes & orchestrationcurated
Impact
vsock buffer overflow producing potentially exploitable crashes
Who can reach it
Any tenant guest VM
What to do
Upgrade Firecracker; restart microVMs
References
Related entries
- Firecracker: Out-of-bounds write in the virtio PCI transportCVE-2026-5747 · FirecrackerHigh
- Firecracker: Unbounded serial console buffer growth leaks host memoryCVE-2020-27174 · FirecrackerHigh
- Firecracker: Symlink following in the jailer lets a local host user with write access to pre-created jailerCVE-2026-1386 · FirecrackerMedium
- Firecracker: Network stack freezes under heavy ingressCVE-2020-16843 · FirecrackerMedium
- Slurm: RPC buffer overflow in the PMIx MPI pluginCVE-2020-27745 · SlurmCritical
- Istio: With AUTO_PASSTHROUGH gateways, an external client reaches arbitrary in-cluster services, bypassingCVE-2021-31921 · IstioCritical
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.