Skip to content
OpenAdvisories
Low · 3.8 Public exploit CVE-2020-2023 EUVD-2022-0858GHSA-6978-vg2j-cc9q

Kata Containers - Containers have access to the guest root filesystem device

Published Jun 10, 2020 · Updated Sep 17, 2024 · Assigned by palo_alto

Vendor: kata-containers Product: kata-containers Package: github.com/kata-containers/agent Package: github.com/kata-containers/runtime Ecosystem: Go

Description

Kata Containers doesn't restrict containers from accessing the guest's root filesystem device. Malicious containers can exploit this to gain code execution on the guest and masquerade as the kata-agent. This issue affects Kata Containers 1.11 versions earlier than 1.11.1; Kata Containers 1.10 versions earlier than 1.10.5; and Kata Containers 1.9 and earlier versions.

Affected products

VendorProductAffectedFixed
Kata Containers Kata Containers 1.11 – < 1.11.1, 1.10 – < 1.10.5, 1 – ≤ 1.9 1.11.1

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/kata-containers/agent < 1.9.1 1.9.1 GHSA-6978-vg2j-cc9q
Go github.com/kata-containers/agent >= 1.10.0, < 1.10.5 1.10.5 GHSA-6978-vg2j-cc9q
Go github.com/kata-containers/agent >= 1.11.0, < 1.11.1 1.11.1 GHSA-6978-vg2j-cc9q
Go github.com/kata-containers/runtime < 1.9.1 1.9.1 GHSA-6978-vg2j-cc9q
Go github.com/kata-containers/runtime >= 1.10.0, < 1.10.5 1.10.5 GHSA-6978-vg2j-cc9q
Go github.com/kata-containers/runtime >= 1.11.0, < 1.11.1 1.11.1 GHSA-6978-vg2j-cc9q

References