Vulnerabilities

TI-2020-01938 CVE-2020-2023 · GHSA-6978-vg2j-cc9q

Kata Containers - Containers have access to the guest root filesystem device

LOW 30

Kata Containers doesn't restrict containers from accessing the guest's root filesystem device.

CVSS 3.1MEDIUM 6.3 Local Low privileges No interaction EPSS 0.01149 Published 2020-06-10 Fixed in 1.11.1, 1.10.5 +1 CWE-250

TI-2020-01941 CVE-2020-2026 · GHSA-877x-32pm-p28x

LOW 39

A malicious guest compromised before a container creation (e.g.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00475 Published 2020-06-10 Fixed in 1.11.1, 1.10.5 +2 CWE-59

TI-2020-01940 CVE-2020-2025

LOW 38

Kata Containers before 1.11.0 on Cloud Hypervisor persists guest filesystem changes to the underlying image file on the host.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00313 Published 2020-05-19 Fixed in 1.11.0 CWE-284

TI-2020-01939 CVE-2020-2024

LOW 29

An improper link resolution vulnerability affects Kata Containers versions prior to 1.11.0.

CVSS 3.1MEDIUM 6.5 Local Low privileges No interaction EPSS 0.00366 Published 2020-05-19 Fixed in 1.11.0 CWE-59