CVE-2020-2024: falha de média gravidade em Kata Containers
Kata Containers - Guests can trick the kata-runtime into unmounting any mount point on the host
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.4%
An improper link resolution vulnerability affects Kata Containers versions prior to 1.11.0. Upon container teardown, a malicious guest can trick the kata-runtime into unmounting any mount point on the host and all mount points underneath it, potentiality resulting in a host DoS.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Produtos afetados
Kata Containers · Kata ContainersCVEs relacionadas — Kata Containers
No mesmo produto, das mais perigosas para as menos.
CVE-2020-2023LOWKata Containers - Containers have access to the guest root filesystem deviceEPSS 1.1%CVE-2020-2026HIGHKata Containers - Guests can trick the kata-runtime into mounting the container image on any host pathEPSS 0.5%CVE-2020-2025HIGHKata Containers - Cloud Hypervisor guests persist filesystem changes to the underlying host image fileEPSS 0.3%