Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2020-2025

Kata Containers - Cloud Hypervisor guests persist filesystem changes to the underlying host image file

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

Kata Containers before 1.11.0 on Cloud Hypervisor persists guest filesystem changes to the underlying image file on the host. A malicious guest can overwrite the image file to gain control of all subsequent guest VMs. Since Kata Containers uses the same VM image file with all VMMs, this issue may also affect QEMU and Firecracker based guests.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kata Containers Kata Containers

  • unspecified to < 1.11.0affected

References