Kata Containers - Containers have access to the guest root filesystem device
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 3.8epss 1.1%
probabilidade de exploração
1.1%top 35% das CVEs
exploração observada
nãonenhuma fonte reporta
Kata Containers doesn't restrict containers from accessing the guest's root filesystem device. Malicious containers can exploit this to gain code execution on the guest and masquerade as the kata-agent. This issue affects Kata Containers 1.11 versions earlier than 1.11.1; Kata Containers 1.10 versions earlier than 1.10.5; and Kata Containers 1.9 and earlier versions.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
Produtos afetados
Kata Containers · Kata ContainersReferências
https://github.com/kata-containers/agent/issues/791https://github.com/kata-containers/agent/pull/792https://github.com/kata-containers/runtime/issues/2488https://github.com/kata-containers/runtime/pull/2477https://github.com/kata-containers/runtime/pull/2487https://github.com/kata-containers/runtime/releases/tag/1.10.5https://github.com/kata-containers/runtime/releases/tag/1.11.1