CyberRota Analysis
AI-GeneratedEclipse Ankaios versions 0.1.0 through 1.0.1 are vulnerable due to an unbounded memory allocation issue in the Control Interface FIFO, where a workload can specify an excessively long message length. This vulnerability can lead to the agent process being aborted, resulting in the loss of orchestration services for managed workloads. Organizations using affected versions should prioritize remediation to maintain service availability and prevent potential disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
In Eclipse Ankaios versions 0.1.0 through 1.0.1, the agent does not limit the length declared by a workload in a length-delimited protobuf message received through the Control Interface FIFO. A workload granted Control Interface access can specify an excessive message length, causing an unbounded memory allocation that may abort the Ankaios agent process. This results in loss of orchestration services for workloads managed by the affected agent.