kata-containers

Kata Containers ¡Bienvenido a Kata Containers! Este repositorio es el hogar del código de Kata Containers para las versiones 2.0 y posteriores. Si quieres aprender sobre Kata Containers, visita el sitio web principal de Kata Containers. Introducción Kata Containers es un proyecto y comunidad de...

vulhub

Vulhub is an open-source collection of pre-built, ready-to-use vulnerable Docker environments. With just one command you can launch a vulnerable environment for security research, learning, or demonstration, no prior Docker experience required. 中文版本Chinese version Quick Start Install Docker examp...

kata-cve-2020-2023-poc

kata-cve-2020-2023-poc 1. Entorno de reproducción Nota: El entorno requiere soporte KVM https://github.com/ssst0n3/dockerarchive/tree/branchubuntu-20.04docker-ce-19.03.11containerd.io-1.4.9kata-1.11.0 root@kitploit: $ git clone https://github.com/ssst0n3/dockerarchive.git $ cd dockerarchive $ git...

AZL-99234 CVE-2026-85091 affecting package kata-containers 3.32.0.kata0-5

zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability in the gzvacate function when processing non-blocking gzwrite operations with stale external buffer pointers. Attackers can trigger the overflow by calling gzprintf or gzvprintf after a write stall, causing an...

AZL-99138 CVE-2026-84304 affecting package kata-containers-preview 3.27.0~preview2-2

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...

AZL-99240 CVE-2026-84304 affecting package kata-containers-cc 3.15.0.aks0-20

gRPC-Go is the Go language implementation of gRPC. Prior to 1.83.1, internal/transport/transport.go stores each fragmented HTTP/2 DATA frame as a separate recvMsg in recvBuffer, so millions of one-byte frames can consume disproportionate heap memory even when payload bytes remain within connectio...

CVE-2026-43871 affecting package kata-containers-cc for versions less than 3.15.0.aks0-17

CVE-2026-43871 affecting package kata-containers-cc for versions less than 3.15.0.aks0-17. A patched version of the package is available...

AZL-97442 CVE-2026-77176 affecting package kata-containers-preview 3.27.0~preview2-2

A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient validation of CreateContainer mount and storage rules. This allows them to mount arbitrary container-rootfs paths over...

AZL-97479 CVE-2026-77176 affecting package kata-containers 3.32.0.kata0-2

A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient validation of CreateContainer mount and storage rules. This allows them to mount arbitrary container-rootfs paths over...

CVE-2026-77176

A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient validation of CreateContainer mount and storage rules. This allows them to mount arbitrary container-rootfs paths over...

CVE-2026-77176 Kata-containers: insufficient validation of createcontainer mount and storage rules in genpolicy

A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient validation of CreateContainer mount and storage rules. This allows them to mount arbitrary container-rootfs paths over...

CVE-2026-77176 Kata-containers: insufficient validation of createcontainer mount and storage rules in genpolicy

A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient validation of CreateContainer mount and storage rules. This allows them to mount arbitrary container-rootfs paths over...

EUVD-2026-63432

A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient validation of CreateContainer mount and storage rules. This allows them to mount arbitrary container-rootfs paths over...

CVE-2026-77176

Kata Containers is affected by a flaw in the genpolicy component used for Confidential Containers guest protection. The root cause is insufficient validation of CreateContainer mount and storage rules , which allows a malicious host operator to mount arbitrary container-rootfs paths over sensitiv...

CVE-2026-77176

A flaw was found in Kata Containers. In configurations utilizing genpolicy for Confidential Containers guest protection, a malicious host operator can exploit insufficient validation of CreateContainer mount and storage rules. This allows them to mount arbitrary container-rootfs paths over...

PT-2026-79070

Name of the Vulnerable Software and Affected Versions Kata Containers affected versions not specified Description In configurations using genpolicy for Confidential Containers guest protection, insufficient validation of CreateContainer mount and storage rules allows a malicious host operator to...

CVE-2026-50540 affecting package kata-containers for versions less than 3.32.0.kata0-3

CVE-2026-50540 affecting package kata-containers for versions less than 3.32.0.kata0-3. A patched version of the package is available...

CVE-2026-47243 affecting package kata-containers for versions less than 3.32.0.kata0-1

CVE-2026-47243 affecting package kata-containers for versions less than 3.32.0.kata0-1. A patched version of the package is available...

CVE-2026-44210 affecting package kata-containers for versions less than 3.32.0.kata0-1

CVE-2026-44210 affecting package kata-containers for versions less than 3.32.0.kata0-1. An upgraded version of the package is available that resolves this issue...

AZL-95604 CVE-2026-70622 affecting package kata-containers 3.32.0.kata0-5

tar-rs versions 0.4.11 through 0.4.46 contain a symlink escape vulnerability in the Builder::appenddirall function that allows attackers to read files outside the intended source root directory by planting symlinks in an attacker-controlled directory. When a privileged process archives an untrust...