CVE-2020-2025
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2020-2025
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-2025.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2020-2025
- Published
- 2020-05-19T21:15:10Z
- Modified
- 2025-01-14T08:37:14.461358Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
- Summary
- [none]
- Details
-
Kata Containers before 1.11.0 on Cloud Hypervisor persists guest filesystem changes to the underlying image file on the host. A malicious guest can overwrite the image file to gain control of all subsequent guest VMs. Since Kata Containers uses the same VM image file with all VMMs, this issue may also affect QEMU and Firecracker based guests.
- References
Affected packages
Git / github.com/kata-containers/runtime
Affected ranges
- Type
- GIT
- Repo
- https://github.com/kata-containers/runtime
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedFixed
Affected versions
0.*
0.0.1
0.2.0
0.3.0
1.*
1.0.0
1.1.0
1.10.0-alpha0
1.10.0-alpha1
1.10.0-rc0
1.11.0-alpha0
1.11.0-alpha1
1.11.0-rc0
1.2.0
1.3.0
1.3.0-rc0
1.3.0-rc1
1.4.0
1.5.0
1.5.0-rc1
1.5.0-rc2
1.6.0-rc1
1.6.0-rc2
1.7.0
1.7.0-alpha0
1.7.0-alpha1
1.7.0-rc1
1.8.0-alpha0
1.8.0-alpha1
1.8.0-alpha2
1.8.0-rc0
1.9.0-alpha0
1.9.0-alpha1
1.9.0-alpha2
1.9.0-rc0
Other
20191207