[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$faEfWa064ntI28MjhTUGxzHmZA4v98cZb1KmYOT2dKTo":3,"g5a-risk:CVE-2020-27174":120},{"success":4,"data":5,"meta":118},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":66,"weaknesses":67,"weaknessesCount":48,"isActivelyExploited":76,"cisaInfo":26,"otxData":26,"relatedBlogPosts":77,"seoMetadata":78,"configurations":103,"relatedVendorCves":116,"notableEvents":117},"CVE-2020-27174","What is CVE-2020-27174?","In Amazon AWS Firecracker before 0.21.3, and 0.22.x before 0.22.1, the serial console buffer can grow its memory usage without limit when data is sent to the standard input. This can result in a memory leak on the microVM emulation thread, possibly occupying more memory than intended on the host.","In Amazon AWS Firecracker before 0.21.3, and 0.22.x before 0.22.1, the serial console buffer can grow its memory usage without limit when data is sent to the...","2020-10-16T05:15:11.83","2021-07-21T11:39:23.747",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:N\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:N\u002FI:N\u002FA:P","PARTIAL",5,"MEDIUM",10,2.9,0.01741,[39,39,39,39,39,39,39],"High",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"amazon","firecracker","*","cpe:2.3:a:amazon:firecracker:*:*:*:*:*:*:*:*",1,[50,55,59,63],{"url":51,"source":52,"tags":53},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2020\u002F10\u002F23\u002F1","Openwall",[54],"Third Party Advisory",{"url":56,"source":57,"tags":58},"https:\u002F\u002Fgithub.com\u002Ffirecracker-microvm\u002Ffirecracker\u002Fissues\u002F2177","GitHub",[54],{"url":60,"source":57,"tags":61},"https:\u002F\u002Fgithub.com\u002Ffirecracker-microvm\u002Ffirecracker\u002Fpull\u002F2178",[62,54],"Patch",{"url":64,"source":57,"tags":65},"https:\u002F\u002Fgithub.com\u002Ffirecracker-microvm\u002Ffirecracker\u002Fpull\u002F2179",[62,54],4,[68],{"id":69,"name":70,"description":71,"extendedDescription":72,"status":73,"abstraction":74,"structure":75},"CWE-401","Missing Release of Memory after Effective Lifetime","The product does not sufficiently track and release allocated memory after it has been used, which slowly consumes remaining memory.","This is often triggered by improper handling of malformed data or unexpectedly interrupted sessions.  In some languages, developers are responsible for tracking memory allocation and releasing the memory.  If there are no more pointers or references to the memory, then it can no longer be tracked and identified for release.","Draft","Variant","Simple",false,[],{"title":79,"metaDescription":80,"keywords":81,"canonicalUrl":82,"structuredData":83},"What is CVE-2020-27174? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2020-27174, a high severity cyber security vulnerability from 2020. In Amazon AWS Firecracker before 0.21.3, and 0.22.x before ...","CVE-2020-27174, CVE-2020-27174 vulnerability, CVE-2020-27174 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, amazon security, firecracker vulnerability","\u002Fwhat-is\u002Fcve-2020-27174",{"@context":84,"@type":85,"headline":79,"description":80,"datePublished":10,"dateModified":11,"author":86,"publisher":90,"about":94,"mainEntityOfPage":98,"articleSection":101,"keywords":102},"https:\u002F\u002Fschema.org","TechArticle",{"@type":87,"name":88,"url":89},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":87,"name":88,"url":89,"logo":91},{"@type":92,"url":93},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":95,"name":6,"description":96,"additionalType":97},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":99,"@id":100},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2020-27174","Cybersecurity","CVE-2020-27174, CVE-2020-27174 vulnerability, CVE-2020-27174 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[104],{"Operator":26,"Negate":26,"Nodes":105},[106],{"Operator":107,"Negate":26,"CPEMatch":108},"OR",[109,112],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":110,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":111,"VersionEndIncluding":26},"2097E568-0639-495D-A157-BE1E429CF09C","0.21.3",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":113,"VersionStartExcluding":26,"VersionStartIncluding":114,"VersionEndExcluding":115,"VersionEndIncluding":26},"8839BF50-88C4-4FD3-95D7-B5B74C5104DA","0.22.0","0.22.1",[],[],{"lastModified":11,"cacheTime":119,"version":32},1793226404319,{"score":121,"band":122,"action":123,"scoredAt":124},47,"Medium","Plan remediation","2026-10-28T06:49:30.838899+00:00"]