VulnerabilityModified
CVE-2020-2023
Malicious containers can exploit this to gain code execution on the guest and masquerade as the kata-agent.
MEDIUM 6.3EPSS 1.14%
Does this matter?
Lower severity and a low EPSS score (1.14%). Track it; it rarely justifies an emergency change on its own.
Description
Kata Containers doesn't restrict containers from accessing the guest's root filesystem device. Malicious containers can exploit this to gain code execution on the guest and masquerade as the kata-agent. This issue affects Kata Containers 1.11 versions earlier than 1.11.1; Kata Containers 1.10 versions earlier than 1.10.5; and Kata Containers 1.9 and earlier versions.
- CVSS 3.1
- 6.3 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
- EPSS
- 1.14% probability · 65th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-250
- Affected
- katacontainers/runtime
- Source
- psirt@paloaltonetworks.com
References
- https://github.com/kata-containers/agent/issues/791Third Party Advisory
- https://github.com/kata-containers/agent/pull/792Patch
- https://github.com/kata-containers/runtime/issues/2488Patch, Third Party Advisory
- https://github.com/kata-containers/runtime/pull/2477Patch, Third Party Advisory
- https://github.com/kata-containers/runtime/pull/2487Patch, Third Party Advisory
- https://github.com/kata-containers/runtime/releases/tag/1.10.5Release Notes, Third Party Advisory
- https://github.com/kata-containers/runtime/releases/tag/1.11.1Release Notes, Third Party Advisory
- https://github.com/kata-containers/agent/issues/791Third Party Advisory
- https://github.com/kata-containers/agent/pull/792Patch
- https://github.com/kata-containers/runtime/issues/2488Patch, Third Party Advisory
- https://github.com/kata-containers/runtime/pull/2477Patch, Third Party Advisory
- https://github.com/kata-containers/runtime/pull/2487Patch, Third Party Advisory
- https://github.com/kata-containers/runtime/releases/tag/1.10.5Release Notes, Third Party Advisory
- https://github.com/kata-containers/runtime/releases/tag/1.11.1Release Notes, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.