Vulnerability-Lookup

CNVD-2021-25673

Vulnerability from cnvd - Published: 2021-04-08

Title

Kata Containers存在未明漏洞

Description

Kata Containers是Kata Containers社区的一款开源的轻量级虚拟机构建程序。 Kata Containers 1.11.1之前的1.11版本、1.10.5之前的1.10版本和1.9及之前版本中存在安全漏洞，攻击者可利用该漏洞执行代码和冒充kata代理。

Severity

中

Patch Name

Kata Containers存在未明漏洞的补丁

Patch Description

Kata Containers是Kata Containers社区的一款开源的轻量级虚拟机构建程序。 Kata Containers 1.11.1之前的1.11版本、1.10.5之前的1.10版本和1.9及之前版本中存在安全漏洞，攻击者可利用该漏洞执行代码和冒充kata代理。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

厂商已提供漏洞修补方案，请关注厂商主页及时更新： https://github.com/kata-containers/runtime/releases/tag/1.10.5 https://github.com/kata-containers/runtime/releases/tag/1.11.1

Reference

https://nvd.nist.gov/vuln/detail/CVE-2020-2023

Impacted products

Name
['Kata Kata Containers 1.11，<1.11.1', 'Kata Kata Containers 1.10，<1.10.5', 'Kata Kata Containers <=1.9']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2020-2023"
    }
  },
  "description": "Kata Containers\u662fKata Containers\u793e\u533a\u7684\u4e00\u6b3e\u5f00\u6e90\u7684\u8f7b\u91cf\u7ea7\u865a\u62df\u673a\u6784\u5efa\u7a0b\u5e8f\u3002\n\nKata Containers 1.11.1\u4e4b\u524d\u76841.11\u7248\u672c\u30011.10.5\u4e4b\u524d\u76841.10\u7248\u672c\u548c1.9\u53ca\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4ee3\u7801\u548c\u5192\u5145kata\u4ee3\u7406\u3002",
  "formalWay": "\u5382\u5546\u5df2\u63d0\u4f9b\u6f0f\u6d1e\u4fee\u8865\u65b9\u6848\uff0c\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\u53ca\u65f6\u66f4\u65b0\uff1a\r\nhttps://github.com/kata-containers/runtime/releases/tag/1.10.5\r\nhttps://github.com/kata-containers/runtime/releases/tag/1.11.1",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2021-25673",
  "openTime": "2021-04-08",
  "patchDescription": "Kata Containers\u662fKata Containers\u793e\u533a\u7684\u4e00\u6b3e\u5f00\u6e90\u7684\u8f7b\u91cf\u7ea7\u865a\u62df\u673a\u6784\u5efa\u7a0b\u5e8f\u3002\r\n\r\nKata Containers 1.11.1\u4e4b\u524d\u76841.11\u7248\u672c\u30011.10.5\u4e4b\u524d\u76841.10\u7248\u672c\u548c1.9\u53ca\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4ee3\u7801\u548c\u5192\u5145kata\u4ee3\u7406\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Kata Containers\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Kata Kata Containers 1.11\uff0c\u003c1.11.1",
      "Kata Kata Containers 1.10\uff0c\u003c1.10.5",
      "Kata Kata Containers \u003c=1.9"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2020-2023",
  "serverity": "\u4e2d",
  "submitTime": "2020-06-11",
  "title": "Kata Containers\u5b58\u5728\u672a\u660e\u6f0f\u6d1e"
}

CVE-2020-2023 (GCVE-0-2020-2023)

Vulnerability from cvelistv5 – Published: 2020-06-10 17:30 – Updated: 2024-09-17 01:15

Title

Kata Containers - Containers have access to the guest root filesystem device

Summary

Kata Containers doesn't restrict containers from accessing the guest's root filesystem device. Malicious containers can exploit this to gain code execution on the guest and masquerade as the kata-agent. This issue affects Kata Containers 1.11 versions earlier than 1.11.1; Kata Containers 1.10 versions earlier than 1.10.5; and Kata Containers 1.9 and earlier versions.

Severity ?

3.8 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

CWE

CWE-250 - Execution with Unnecessary Privileges

Assigner

palo_alto

References

URL

Tags

	https://github.com/kata-containers/runtime/pull/2487	x_refsource_MISC
	https://github.com/kata-containers/runtime/pull/2477	x_refsource_MISC
	https://github.com/kata-containers/runtime/issues/2488	x_refsource_MISC
	https://github.com/kata-containers/agent/issues/791	x_refsource_MISC
	https://github.com/kata-containers/agent/pull/792	x_refsource_MISC
	https://github.com/kata-containers/runtime/releas…	x_refsource_MISC
	https://github.com/kata-containers/runtime/releas…	x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Kata Containers	Kata Containers	Affected: 1.11 , < 1.11.1 (custom) Affected: 1.10 , < 1.10.5 (custom) Affected: 1 , ≤ 1.9 (custom)

Credits

Yuval Avrahami, Palo Alto Networks

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T06:54:00.678Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/kata-containers/runtime/pull/2487"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/kata-containers/runtime/pull/2477"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/kata-containers/runtime/issues/2488"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/kata-containers/agent/issues/791"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/kata-containers/agent/pull/792"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/kata-containers/runtime/releases/tag/1.11.1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/kata-containers/runtime/releases/tag/1.10.5"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Kata Containers",
          "vendor": "Kata Containers",
          "versions": [
            {
              "lessThan": "1.11.1",
              "status": "affected",
              "version": "1.11",
              "versionType": "custom"
            },
            {
              "lessThan": "1.10.5",
              "status": "affected",
              "version": "1.10",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.9",
              "status": "affected",
              "version": "1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "value": "Affects QEMU and Cloud Hypervisor guests on the default configuration. Doesn\u0027t affect initrd (initramfs) based guests. Requires the container to have CAP_SYS_MKNOD, the default in Docker and Kubernetes with containerd, but not in Kubernetes with CRI-O."
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Yuval Avrahami, Palo Alto Networks"
        }
      ],
      "datePublic": "2020-06-10T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Kata Containers doesn\u0027t restrict containers from accessing the guest\u0027s root filesystem device. Malicious containers can exploit this to gain code execution on the guest and masquerade as the kata-agent. This issue affects Kata Containers 1.11 versions earlier than 1.11.1; Kata Containers 1.10 versions earlier than 1.10.5; and Kata Containers 1.9 and earlier versions."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.8,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-250",
              "description": "CWE-250 Execution with Unnecessary Privileges",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-06-10T17:30:12.000Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kata-containers/runtime/pull/2487"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kata-containers/runtime/pull/2477"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kata-containers/runtime/issues/2488"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kata-containers/agent/issues/791"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kata-containers/agent/pull/792"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kata-containers/runtime/releases/tag/1.11.1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kata-containers/runtime/releases/tag/1.10.5"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Kata Containers - Containers have access to the guest root filesystem device",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@paloaltonetworks.com",
          "DATE_PUBLIC": "2020-06-10T16:00:00.000Z",
          "ID": "CVE-2020-2023",
          "STATE": "PUBLIC",
          "TITLE": "Kata Containers - Containers have access to the guest root filesystem device"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Kata Containers",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "1.11",
                            "version_value": "1.11.1"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "1.10",
                            "version_value": "1.10.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "1",
                            "version_value": "1.9"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Kata Containers"
              }
            ]
          }
        },
        "configuration": [
          {
            "lang": "en",
            "value": "Affects QEMU and Cloud Hypervisor guests on the default configuration. Doesn\u0027t affect initrd (initramfs) based guests. Requires the container to have CAP_SYS_MKNOD, the default in Docker and Kubernetes with containerd, but not in Kubernetes with CRI-O."
          }
        ],
        "credit": [
          {
            "lang": "eng",
            "value": "Yuval Avrahami, Palo Alto Networks"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Kata Containers doesn\u0027t restrict containers from accessing the guest\u0027s root filesystem device. Malicious containers can exploit this to gain code execution on the guest and masquerade as the kata-agent. This issue affects Kata Containers 1.11 versions earlier than 1.11.1; Kata Containers 1.10 versions earlier than 1.10.5; and Kata Containers 1.9 and earlier versions."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.8,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-250 Execution with Unnecessary Privileges"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/kata-containers/runtime/pull/2487",
              "refsource": "MISC",
              "url": "https://github.com/kata-containers/runtime/pull/2487"
            },
            {
              "name": "https://github.com/kata-containers/runtime/pull/2477",
              "refsource": "MISC",
              "url": "https://github.com/kata-containers/runtime/pull/2477"
            },
            {
              "name": "https://github.com/kata-containers/runtime/issues/2488",
              "refsource": "MISC",
              "url": "https://github.com/kata-containers/runtime/issues/2488"
            },
            {
              "name": "https://github.com/kata-containers/agent/issues/791",
              "refsource": "MISC",
              "url": "https://github.com/kata-containers/agent/issues/791"
            },
            {
              "name": "https://github.com/kata-containers/agent/pull/792",
              "refsource": "MISC",
              "url": "https://github.com/kata-containers/agent/pull/792"
            },
            {
              "name": "https://github.com/kata-containers/runtime/releases/tag/1.11.1",
              "refsource": "MISC",
              "url": "https://github.com/kata-containers/runtime/releases/tag/1.11.1"
            },
            {
              "name": "https://github.com/kata-containers/runtime/releases/tag/1.10.5",
              "refsource": "MISC",
              "url": "https://github.com/kata-containers/runtime/releases/tag/1.10.5"
            }
          ]
        },
        "source": {
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2020-2023",
    "datePublished": "2020-06-10T17:30:12.051Z",
    "dateReserved": "2019-12-04T00:00:00.000Z",
    "dateUpdated": "2024-09-17T01:15:36.499Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2021-25673

CVE-2020-2023 (GCVE-0-2020-2023)

Tags

Sightings

Nomenclature