CVE-2020-2024CWE-59

Kata Containers - Guests can trick the kata-runtime into unmounting any mount point on the host

Medium · published May 19, 2020

CVSS v3.1
6.5
EPSS
0%
Percentile
29.3
In the wild
Unconfirmed
What it is

An improper link resolution vulnerability affects Kata Containers versions prior to 1.11.0. Upon container teardown, a malicious guest can trick the kata-runtime into unmounting any mount point on the host and all mount points underneath it, potentiality resulting in a host DoS.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00366 · 29.3th percentile
Weakness
CWE-59 · Improper Link Resolution Before File Access ('Link Following')
Published
2020-05-19T21:05Z
EPSS history
Timeline
  • 19 MAY 21:05Z
    Kata Containers - Guests can trick the kata-runtime into unmounting any mount point on the host
    cvelistv5