Kata Containers up to 1.9/1.10.4/1.11.0 Container Creation link following

Summaryinfo

A vulnerability classified as critical was found in Kata Containers up to 1.9/1.10.4/1.11.0. This impacts an unknown function of the component Container Creation Handler. Such manipulation leads to link following. This vulnerability is documented as CVE-2020-2026. The attack needs to be performed locally. There is not any exploit available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability was found in Kata Containers up to 1.9/1.10.4/1.11.0 (Virtualization Software) and classified as critical. Affected by this issue is an unknown function of the component Container Creation Handler. The manipulation with an unknown input leads to a link following vulnerability. Using CWE to declare the problem leads to CWE-59. The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource. Impacted is confidentiality, integrity, and availability. CVE summarizes:

A malicious guest compromised before a container creation (e.g. a malicious guest image or a guest running multiple containers) can trick the kata runtime into mounting the untrusted container filesystem on any host path, potentially allowing for code execution on the host. This issue affects: Kata Containers 1.11 versions earlier than 1.11.1; Kata Containers 1.10 versions earlier than 1.10.5; Kata Containers 1.9 and earlier versions.

The weakness was released 06/10/2020. This vulnerability is handled as CVE-2020-2026 since 12/04/2019. The exploitation is known to be difficult. Local access is required to approach this attack. The successful exploitation requires a simple authentication. The technical details are unknown and an exploit is not available.

Upgrading to version 1.10.5 or 1.11.1 eliminates this vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Virtualization Software

Vendor

• Kata

Name

• Containers

Version

• 1.0
• 1.1
• 1.2
• 1.3
• 1.4
• 1.5
• 1.6
• 1.7
• 1.8
• 1.9
• 1.10
• 1.10.0
• 1.10.1
• 1.10.2
• 1.10.3
• 1.10.4
• 1.11.0

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion