High severity · published May 19, 2020
CVE-2020-2025
Kata Containers before 1.11.0 on Cloud Hypervisor persists guest filesystem changes to the underlying image file on the host
8.8
CVSS
0.3%
EPSS
No
On KEV
Description
Kata Containers before 1.11.0 on Cloud Hypervisor persists guest filesystem changes to the underlying image file on the host. A malicious guest can overwrite the image file to gain control of all subsequent guest VMs. Since Kata Containers uses the same VM image file with all VMMs, this issue may also affect QEMU and Firecracker based guests.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RU
Runtime · Katacontainers
before 1.11.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-2025
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-2025
Patch
https://github.com/kata-containers/runtime/pull/2487
More from Runtime
8.8
CVE-2020-2026
A malicious guest compromised before a container creation (e.g
6.5
CVE-2020-2024
An improper link resolution vulnerability affects Kata Containers versions prior to 1.11.0
6.3
CVE-2020-2023
Kata Containers doesn't restrict containers from accessing the guest's root filesystem device