VULNERABILITY INTELLIGENCE

CVE-2020-2023

CVSS score3.8 LOW
EPSS probability1.15%
CISA KEVNot currently listed
Published2020-06-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

Description

Kata Containers doesn't restrict containers from accessing the guest's root filesystem device. Malicious containers can exploit this to gain code execution on the guest and masquerade as the kata-agent. This issue affects Kata Containers 1.11 versions earlier than 1.11.1; Kata Containers 1.10 versions earlier than 1.10.5; and Kata Containers 1.9 and earlier versions.

Weakness classification

  • CWE-250: Execution with Unnecessary Privileges

Primary references