Skip to content
OpenAdvisories

Package · Go

github.com/kata-containers/kata-containers

3 known vulnerabilities.

3 results · Feed

  • Critical 9.2

    Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs

    Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Prior to 3.31.0, the runtime-rs standalone virtio-fs path is vulnerable to a guest-root to host-root escape. In…

  • Medium 5.8

    Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations

    Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Versions prior to 3.31.0 ship with a default configuration that allows pod creators to inject arbitrary command…

  • High 8.2

    Kata Containers: CopyFile Policy Subversion via Symlinks

    Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. From v3.4.0 to v3.28.0, an oversight in the CopyFile policy (and perhaps the CopyFile handler) allows untrusted…