CVE-2020-2025

🗓️ 19 May 2020 21:05:21Reported by palo_altoType

Kata Containers before 1.11.0 on Cloud Hypervisor allows guest VMs to gain control by overwriting the image file on the host

Reporter	Title	Published	Views	Family All 11
CNVD	Kata Containers Access Control Error Vulnerability	20 May 202000:00	–	cnvd
Cvelist	CVE-2020-2025 Kata Containers - Cloud Hypervisor guests persist filesystem changes to the underlying host image file	19 May 202021:05	–	cvelist
Oracle linux	Unbreakable Enterprise kernel-container kata-image kata-runtime kata kubernetes kubernetes istio olcne security update	22 Jul 202000:00	–	oraclelinux
Oracle linux	Unbreakable Enterprise kernel-container kata-image kata-runtime kata kubernetes olcne security update	22 Jul 202000:00	–	oraclelinux
EUVD	EUVD-2020-22052	7 Oct 202500:30	–	euvd
Kitploit	Metarget - Framework Providing Automatic Constructions Of Vulnerable Infrastructures	4 Jun 202121:30	–	kitploit
NVD	CVE-2020-2025	19 May 202021:15	–	nvd
Tenable Nessus	Oracle Linux 7 : Unbreakable Enterprise kernel-container kata-image kata-runtime kata kubernetes kubernetes istio olcne (ELSA-2020-5765)	7 Sep 202300:00	–	nessus
Tenable Nessus	Oracle Linux 7 : Unbreakable Enterprise kernel-container kata-image kata-runtime kata kubernetes olcne (ELSA-2020-5766)	7 Sep 202300:00	–	nessus
Prion	Design/Logic Flaw	19 May 202021:15	–	prion

NVD

Node

katacontainers runtimeRange<1.11.0

[
  {
    "product": "Kata Containers",
    "vendor": "Kata Containers",
    "versions": [
      {
        "lessThan": "1.11.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
github	www.github.com/kata-containers/runtime/pull/2487

21 Nov 2024 05:24Current

8.7High risk

Vulners AI Score8.7

CVSS 24.6

CVSS 3.18.8

EPSS0.00113