4 ms·

Container Networking Security Issue (CVE-2020-8558)

• floatingatoll 6y ago
  If you use ECS/EKS: Customer action is required, and steps for immediate mitigation are available at https://github.com/aws/containers-roadmap/issues/976 https://github.com/aws/containers-roadmap/issues/976 All Amazon ECS and Amazon EKS customers should update to the latest AMI.
  • mvanbaak 6y ago
    "AWS Fargate is not affected. No customer action is required."
    • yftsui 6y ago
      Fargate and Lambda use Firecracker https://firecracker-microvm.github.io/ https://firecracker-microvm.github.io/
  • yjftsjthsd-h 6y ago
    However: > This issue presents no risk of cross-account data access. Processes within a container on one host may be able to gain unintended network access to other containers on that same host or on other hosts within the same VPC and subnet. It doesn't sound too bad, especially if you're using subnets to separate things already.
    • deleted 6y ago
      [deleted]