Improper Privilege Management and Execution with Unnecessary Privileges in Kata Containers

2022-02-1501:57:18

Google

osv.dev

kata containers

privilege management

execution

security vulnerability

software issue

EPSS

0.001

Percentile

23.1%

JSON

Kata Containers doesn’t restrict containers from accessing the guest’s root filesystem device. Malicious containers can exploit this to gain code execution on the guest and masquerade as the kata-agent. This issue affects Kata Containers 1.11 versions earlier than 1.11.1; Kata Containers 1.10 versions earlier than 1.10.5; and Kata Containers 1.9 and earlier versions.