kata-containers

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

kata-containers records in CISA KEV

No kata-containers vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

4 records in Runtime · all components

TI-2020-01941 CVE-2020-2026 · GHSA-877x-32pm-p28x

LOW 39

A malicious guest compromised before a container creation (e.g.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00475 Published 2020-06-10 Fixed in 1.11.1, 1.10.5 +2 CWE-59

TI-2020-01940 CVE-2020-2025

LOW 38

Kata Containers before 1.11.0 on Cloud Hypervisor persists guest filesystem changes to the underlying image file on the host.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00313 Published 2020-05-19 Fixed in 1.11.0 CWE-284

TI-2020-01938 CVE-2020-2023 · GHSA-6978-vg2j-cc9q

LOW 30

Kata Containers doesn't restrict containers from accessing the guest's root filesystem device.

CVSS 3.1MEDIUM 6.3 Local Low privileges No interaction EPSS 0.01149 Published 2020-06-10 Fixed in 1.11.1, 1.10.5 +1 CWE-250

TI-2020-01939 CVE-2020-2024

LOW 29

An improper link resolution vulnerability affects Kata Containers versions prior to 1.11.0.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00366 Published 2020-05-19 Fixed in 1.11.0 CWE-59