Description
Firecracker vsock implementation buffer overflow in versions 0.18.0 and 0.19.0. This can result in potentially exploitable crashes.
References
- https://github.com/firecracker-microvm/firecracker/releases
- http://www.openwall.com/lists/oss-security/2019/12/10/1
- https://github.com/firecracker-microvm/firecracker/issues/1462
- https://github.com/firecracker-microvm/firecracker/releases/tag/v0.19.1
- https://github.com/firecracker-microvm/firecracker/releases/tag/v0.18.1
- [oss-security] 20220911 Re: CVE-2019-18960: Firecracker v0.18.0 and v0.19.0 vsock buffer overflow mailing-list