Log in Start free

Vulnerability · Published Jun 10, 2020 · Assigned by palo_alto

CVE-2020-2026Kata Containers - Guests can trick the kata-runtime into mounting the container image on any host path

High 7.8

In plain English

A high-severity security flaw in Kata Containers from Kata Containers. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.5%top 58.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

A malicious guest compromised before a container creation (e.g. a malicious guest image or a guest running multiple containers) can trick the kata runtime into mounting the untrusted container filesystem on any host path, potentially allowing for code execution on the host. This issue affects: Kata Containers 1.11 versions earlier than 1.11.1; Kata Containers 1.10 versions earlier than 1.10.5; Kata Containers 1.9 and earlier versions.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Gogithub.com/kata-containers/runtime1.9.1GHSA-877x-32pm-p28x
Gogithub.com/kata-containers/runtime1.10.6GHSA-877x-32pm-p28x
Gogithub.com/kata-containers/runtime1.11.1GHSA-877x-32pm-p28x

Affected products (as reported)

VendorProductVersions
Kata Containers Kata Containers 1.11 – before 1.11.11.10 – before 1.10.51 – through 1.9

Weakness: CWE-59 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

References