In Firecracker 0.20.x before 0.20.1 and 0.21.x before 0.21.2, the network stack can freeze under heavy ingress traffic. This can result in a denial of service on the microVM when it is configured with a single network interface, and an availability problem for the microVM network interface on which the issue is triggered.
{
"cpe": [
"cpe:2.3:a:amazon:firecracker:0.20.0:*:*:*:*:*:*:*",
"cpe:2.3:a:amazon:firecracker:0.21.0:*:*:*:*:*:*:*",
"cpe:2.3:a:amazon:firecracker:0.21.1:*:*:*:*:*:*:*"
],
"extracted_events": [
{
"introduced": "0.20.0"
},
{
"last_affected": "0.20.0"
},
{
"introduced": "0.21.0"
},
{
"last_affected": "0.21.0"
},
{
"introduced": "0.21.1"
},
{
"last_affected": "0.21.1"
}
],
"source": "CPE_STRING"
}