Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2020-2024

Kata Containers - Guests can trick the kata-runtime into unmounting any mount point on the host

Description

An improper link resolution vulnerability affects Kata Containers versions prior to 1.11.0. Upon container teardown, a malicious guest can trick the kata-runtime into unmounting any mount point on the host and all mount points underneath it, potentiality resulting in a host DoS.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kata Containers Kata Containers

  • unspecified to < 1.11.0affected

References