Vulnerability-Lookup

CNVD-2021-25673

Vulnerability from cnvd - Published: 2021-04-08

Title

Kata Containers存在未明漏洞

Description

Kata Containers是Kata Containers社区的一款开源的轻量级虚拟机构建程序。 Kata Containers 1.11.1之前的1.11版本、1.10.5之前的1.10版本和1.9及之前版本中存在安全漏洞，攻击者可利用该漏洞执行代码和冒充kata代理。

Severity

中

Patch Name

Kata Containers存在未明漏洞的补丁

Patch Description

Kata Containers是Kata Containers社区的一款开源的轻量级虚拟机构建程序。 Kata Containers 1.11.1之前的1.11版本、1.10.5之前的1.10版本和1.9及之前版本中存在安全漏洞，攻击者可利用该漏洞执行代码和冒充kata代理。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

厂商已提供漏洞修补方案，请关注厂商主页及时更新： https://github.com/kata-containers/runtime/releases/tag/1.10.5 https://github.com/kata-containers/runtime/releases/tag/1.11.1

Reference

https://nvd.nist.gov/vuln/detail/CVE-2020-2023

Impacted products

Name
['Kata Kata Containers 1.11，<1.11.1', 'Kata Kata Containers 1.10，<1.10.5', 'Kata Kata Containers <=1.9']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2020-2023"
    }
  },
  "description": "Kata Containers\u662fKata Containers\u793e\u533a\u7684\u4e00\u6b3e\u5f00\u6e90\u7684\u8f7b\u91cf\u7ea7\u865a\u62df\u673a\u6784\u5efa\u7a0b\u5e8f\u3002\n\nKata Containers 1.11.1\u4e4b\u524d\u76841.11\u7248\u672c\u30011.10.5\u4e4b\u524d\u76841.10\u7248\u672c\u548c1.9\u53ca\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4ee3\u7801\u548c\u5192\u5145kata\u4ee3\u7406\u3002",
  "formalWay": "\u5382\u5546\u5df2\u63d0\u4f9b\u6f0f\u6d1e\u4fee\u8865\u65b9\u6848\uff0c\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\u53ca\u65f6\u66f4\u65b0\uff1a\r\nhttps://github.com/kata-containers/runtime/releases/tag/1.10.5\r\nhttps://github.com/kata-containers/runtime/releases/tag/1.11.1",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2021-25673",
  "openTime": "2021-04-08",
  "patchDescription": "Kata Containers\u662fKata Containers\u793e\u533a\u7684\u4e00\u6b3e\u5f00\u6e90\u7684\u8f7b\u91cf\u7ea7\u865a\u62df\u673a\u6784\u5efa\u7a0b\u5e8f\u3002\r\n\r\nKata Containers 1.11.1\u4e4b\u524d\u76841.11\u7248\u672c\u30011.10.5\u4e4b\u524d\u76841.10\u7248\u672c\u548c1.9\u53ca\u4e4b\u524d\u7248\u672c\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4ee3\u7801\u548c\u5192\u5145kata\u4ee3\u7406\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Kata Containers\u5b58\u5728\u672a\u660e\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Kata Kata Containers 1.11\uff0c\u003c1.11.1",
      "Kata Kata Containers 1.10\uff0c\u003c1.10.5",
      "Kata Kata Containers \u003c=1.9"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2020-2023",
  "serverity": "\u4e2d",
  "submitTime": "2020-06-11",
  "title": "Kata Containers\u5b58\u5728\u672a\u660e\u6f0f\u6d1e"
}

CVE-2020-2023 (GCVE-0-2020-2023)

Vulnerability from cvelistv5 – Published: 2020-06-10 17:30 – Updated: 2024-09-17 01:15

Title

Kata Containers - Containers have access to the guest root filesystem device

Summary

Kata Containers doesn't restrict containers from accessing the guest's root filesystem device. Malicious containers can exploit this to gain code execution on the guest and masquerade as the kata-agent. This issue affects Kata Containers 1.11 versions earlier than 1.11.1; Kata Containers 1.10 versions earlier than 1.10.5; and Kata Containers 1.9 and earlier versions.

Severity

3.8 (Low)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N

CWE

CWE-250 - Execution with Unnecessary Privileges

Assigner

palo_alto mitre root

References

7 references

URL	Tags
https://github.com/kata-containers/runtime/pull/2487	x_refsource_MISC
https://github.com/kata-containers/runtime/pull/2477	x_refsource_MISC
https://github.com/kata-containers/runtime/issues/2488	x_refsource_MISC
https://github.com/kata-containers/agent/issues/791	x_refsource_MISC
https://github.com/kata-containers/agent/pull/792	x_refsource_MISC
https://github.com/kata-containers/runtime/releas…	x_refsource_MISC
https://github.com/kata-containers/runtime/releas…	x_refsource_MISC

Impacted products

1 product

Vendor	Product	Version
Kata Containers	Kata Containers	Affected: 1.11 , < 1.11.1 (custom) Affected: 1.10 , < 1.10.5 (custom) Affected: 1 , ≤ 1.9 (custom)

Date Public

2020-06-10 00:00

Credits

Yuval Avrahami, Palo Alto Networks

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T06:54:00.678Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/kata-containers/runtime/pull/2487"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/kata-containers/runtime/pull/2477"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/kata-containers/runtime/issues/2488"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/kata-containers/agent/issues/791"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/kata-containers/agent/pull/792"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/kata-containers/runtime/releases/tag/1.11.1"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://github.com/kata-containers/runtime/releases/tag/1.10.5"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Kata Containers",
          "vendor": "Kata Containers",
          "versions": [
            {
              "lessThan": "1.11.1",
              "status": "affected",
              "version": "1.11",
              "versionType": "custom"
            },
            {
              "lessThan": "1.10.5",
              "status": "affected",
              "version": "1.10",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "1.9",
              "status": "affected",
              "version": "1",
              "versionType": "custom"
            }
          ]
        }
      ],
      "configurations": [
        {
          "lang": "en",
          "value": "Affects QEMU and Cloud Hypervisor guests on the default configuration. Doesn\u0027t affect initrd (initramfs) based guests. Requires the container to have CAP_SYS_MKNOD, the default in Docker and Kubernetes with containerd, but not in Kubernetes with CRI-O."
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "Yuval Avrahami, Palo Alto Networks"
        }
      ],
      "datePublic": "2020-06-10T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Kata Containers doesn\u0027t restrict containers from accessing the guest\u0027s root filesystem device. Malicious containers can exploit this to gain code execution on the guest and masquerade as the kata-agent. This issue affects Kata Containers 1.11 versions earlier than 1.11.1; Kata Containers 1.10 versions earlier than 1.10.5; and Kata Containers 1.9 and earlier versions."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.8,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-250",
              "description": "CWE-250 Execution with Unnecessary Privileges",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-06-10T17:30:12.000Z",
        "orgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
        "shortName": "palo_alto"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kata-containers/runtime/pull/2487"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kata-containers/runtime/pull/2477"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kata-containers/runtime/issues/2488"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kata-containers/agent/issues/791"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kata-containers/agent/pull/792"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kata-containers/runtime/releases/tag/1.11.1"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://github.com/kata-containers/runtime/releases/tag/1.10.5"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Kata Containers - Containers have access to the guest root filesystem device",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "psirt@paloaltonetworks.com",
          "DATE_PUBLIC": "2020-06-10T16:00:00.000Z",
          "ID": "CVE-2020-2023",
          "STATE": "PUBLIC",
          "TITLE": "Kata Containers - Containers have access to the guest root filesystem device"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Kata Containers",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_name": "1.11",
                            "version_value": "1.11.1"
                          },
                          {
                            "version_affected": "\u003c",
                            "version_name": "1.10",
                            "version_value": "1.10.5"
                          },
                          {
                            "version_affected": "\u003c=",
                            "version_name": "1",
                            "version_value": "1.9"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Kata Containers"
              }
            ]
          }
        },
        "configuration": [
          {
            "lang": "en",
            "value": "Affects QEMU and Cloud Hypervisor guests on the default configuration. Doesn\u0027t affect initrd (initramfs) based guests. Requires the container to have CAP_SYS_MKNOD, the default in Docker and Kubernetes with containerd, but not in Kubernetes with CRI-O."
          }
        ],
        "credit": [
          {
            "lang": "eng",
            "value": "Yuval Avrahami, Palo Alto Networks"
          }
        ],
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Kata Containers doesn\u0027t restrict containers from accessing the guest\u0027s root filesystem device. Malicious containers can exploit this to gain code execution on the guest and masquerade as the kata-agent. This issue affects Kata Containers 1.11 versions earlier than 1.11.1; Kata Containers 1.10 versions earlier than 1.10.5; and Kata Containers 1.9 and earlier versions."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "NONE",
            "baseScore": 3.8,
            "baseSeverity": "LOW",
            "confidentialityImpact": "NONE",
            "integrityImpact": "LOW",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-250 Execution with Unnecessary Privileges"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://github.com/kata-containers/runtime/pull/2487",
              "refsource": "MISC",
              "url": "https://github.com/kata-containers/runtime/pull/2487"
            },
            {
              "name": "https://github.com/kata-containers/runtime/pull/2477",
              "refsource": "MISC",
              "url": "https://github.com/kata-containers/runtime/pull/2477"
            },
            {
              "name": "https://github.com/kata-containers/runtime/issues/2488",
              "refsource": "MISC",
              "url": "https://github.com/kata-containers/runtime/issues/2488"
            },
            {
              "name": "https://github.com/kata-containers/agent/issues/791",
              "refsource": "MISC",
              "url": "https://github.com/kata-containers/agent/issues/791"
            },
            {
              "name": "https://github.com/kata-containers/agent/pull/792",
              "refsource": "MISC",
              "url": "https://github.com/kata-containers/agent/pull/792"
            },
            {
              "name": "https://github.com/kata-containers/runtime/releases/tag/1.11.1",
              "refsource": "MISC",
              "url": "https://github.com/kata-containers/runtime/releases/tag/1.11.1"
            },
            {
              "name": "https://github.com/kata-containers/runtime/releases/tag/1.10.5",
              "refsource": "MISC",
              "url": "https://github.com/kata-containers/runtime/releases/tag/1.10.5"
            }
          ]
        },
        "source": {
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "d6c1279f-00f6-4ef7-9217-f89ffe703ec0",
    "assignerShortName": "palo_alto",
    "cveId": "CVE-2020-2023",
    "datePublished": "2020-06-10T17:30:12.051Z",
    "dateReserved": "2019-12-04T00:00:00.000Z",
    "dateUpdated": "2024-09-17T01:15:36.499Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CNVD-2021-25673

CVE-2020-2023 (GCVE-0-2020-2023)

Tags

Sightings

Nomenclature

Related by attack behaviour