CVE-2020-27173

In vm-superio before 0.1.1, the serial console FIFO can grow to unlimited memory usage when data is sent to the input source (i.e., standard input)

published October 16, 2020

CVSS
—
EPSS
2%
Percentile
74.6
In the wild
Unconfirmed
What it is

In vm-superio before 0.1.1, the serial console FIFO can grow to unlimited memory usage when data is sent to the input source (i.e., standard input). This behavior cannot be reproduced from the guest side. When no rate limiting is in place, the host can be subject to memory pressure, impacting all other VMs running on the same host.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01531 · 74.6th percentile
Published
2020-10-16T03:58Z
EPSS history
Timeline
  • 16 OCT 03:58Z
    In vm-superio before 0.1.1, the serial console FIFO can grow to unlimited memory usage when data is sent to the input source (i.e., standard input)
    cvelistv5