Medium severity · published Jun 10, 2020
CVE-2020-2023
Kata Containers doesn't restrict containers from accessing the guest's root filesystem device
6.3
CVSS
1.1%
EPSS
No
On KEV
Description
Kata Containers doesn't restrict containers from accessing the guest's root filesystem device. Malicious containers can exploit this to gain code execution on the guest and masquerade as the kata-agent. This issue affects Kata Containers 1.11 versions earlier than 1.11.1; Kata Containers 1.10 versions earlier than 1.10.5; and Kata Containers 1.9 and earlier versions.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 66% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RU
Runtime · Katacontainers
through 1.9; 1.10 before 1.10.5; 1.11 before 1.11.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-2023
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-2023
Third Party Advisory
https://github.com/kata-containers/agent/issues/791
Patch
https://github.com/kata-containers/agent/pull/792
Patch
https://github.com/kata-containers/runtime/issues/2488
Patch
https://github.com/kata-containers/runtime/pull/2477
Patch
https://github.com/kata-containers/runtime/pull/2487
Release Notes
https://github.com/kata-containers/runtime/releases/tag/1.10.5
More from Runtime
8.8
CVE-2020-2026
A malicious guest compromised before a container creation (e.g
8.8
CVE-2020-2025
Kata Containers before 1.11.0 on Cloud Hypervisor persists guest filesystem changes to the underlying image file on the host
6.5
CVE-2020-2024
An improper link resolution vulnerability affects Kata Containers versions prior to 1.11.0