CVE-2019-18960 - Firecracker vsock implementation buffer overflow in versions 0.18.0 and 0.19.0

CRITICAL

Firecracker vsock implementation buffer overflow in versions 0.18.0 and 0.19.0

Published Dec 11, 2019

9.8

CRITICAL

CVSS 3.1

EPSS 3.25%

Firecracker vsock implementation buffer overflow in versions 0.18.0 and 0.19.0. This can result in potentially exploitable crashes.

No remediation recorded yet.

Weaknesses (1)

CWE-120

Classic Buffer Overflow

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2019/12/10/1		x_refsource_MISCMailing ListThird Party Advisory
http://www.openwall.com/lists/oss-security/2022/09/11/2		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://github.com/firecracker-microvm/firecracker/issues/1462		x_refsource_MISCThird Party Advisory
https://github.com/firecracker-microvm/firecracker/releases		x_refsource_MISCRelease NotesThird Party Advisory
https://github.com/firecracker-microvm/firecracker/releases/tag/v0.18.1		x_refsource_CONFIRMRelease NotesThird Party Advisory
https://github.com/firecracker-microvm/firecracker/releases/tag/v0.19.1		x_refsource_CONFIRMRelease NotesThird Party Advisory