1. Home
  2. CVE Database
  3. CVE-2020-27173
HIGH · 7.5

CVE-2020-27173

In vm-superio before 0.1.1, the serial console FIFO can grow to unlimited memory usage when data is sent to the input source (i.e., standard input). This behavior cannot be reproduced from the guest s...

Vulnerability Description

In vm-superio before 0.1.1, the serial console FIFO can grow to unlimited memory usage when data is sent to the input source (i.e., standard input). This behavior cannot be reproduced from the guest side. When no rate limiting is in place, the host can be subject to memory pressure, impacting all other VMs running on the same host.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH

Affected Products

VendorProductVersions
Vm-Superio ProjectVm-Superio< 0.1.1

Related Weaknesses (CWE)

CWE-770

References

FAQ

What is CVE-2020-27173?

CVE-2020-27173 is a vulnerability with a CVSS score of 7.5 (HIGH). In vm-superio before 0.1.1, the serial console FIFO can grow to unlimited memory usage when data is sent to the input source (i.e., standard input). This behavior cannot be reproduced from the guest s...

How severe is CVE-2020-27173?

CVE-2020-27173 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-27173?

Check the references section above for vendor advisories and patch information. Affected products include: Vm-Superio Project Vm-Superio.