Database/Container, Kubernetes & orchestration
Firecracker: Network stack freezes under heavy ingress
CVSS 5.9CVE-2020-16843Container, Kubernetes & orchestrationcurated
Impact
Network stack freezes under heavy ingress; microVM DoS
Who can reach it
Unauthenticated network
What to do
Upgrade Firecracker
References
Related entries
- Firecracker: vsock buffer overflow producing potentially exploitable crashesCVE-2019-18960 · FirecrackerCritical
- Firecracker: Out-of-bounds write in the virtio PCI transportCVE-2026-5747 · FirecrackerHigh
- Firecracker: Unbounded serial console buffer growth leaks host memoryCVE-2020-27174 · FirecrackerHigh
- Firecracker: Symlink following in the jailer lets a local host user with write access to pre-created jailerCVE-2026-1386 · FirecrackerMedium
- ingress-nginx: A tenant can overwrite another ingress's basic-auth password fileCVE-2020-8553 · ingress-nginxMedium
- Podman: Rootless containers see all traffic as coming from 127.0.0.1, defeating localhost-trust checksCVE-2021-20199 · PodmanMedium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.