CVE-2020-2025: Kata Containers - Cloud Hypervisor guests persist filesystem changes to the underlying host image file
Kata Containers before 1.11.0 on Cloud Hypervisor persists guest filesystem changes to the underlying image file on the host. A malicious guest can overwrite the image file to gain control of all subsequent guest VMs. Since Kata Containers uses the same VM image file with all VMMs, this issue may also affect QEMU and Firecracker based guests.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2020-2025?
CVE-2020-2025 has a high severity rating of 8.8 based on the CVSS 3.1 scoring system.
How do I fix CVE-2020-2025?
To fix CVE-2020-2025, you need to apply the available patch from Kata Containers version 1.11.0 or later.
What vulnerability does CVE-2020-2025 address?
CVE-2020-2025 addresses the risk of guest filesystem changes being persisted to the host image file, allowing a malicious guest to gain control of subsequent guest VMs.
What software is affected by CVE-2020-2025?
The affected software for CVE-2020-2025 is the Kata Containers Runtime prior to version 1.11.0.
What can happen if CVE-2020-2025 is exploited?
If exploited, CVE-2020-2025 allows a malicious guest to overwrite the host image file, jeopardizing the security of other virtual machines.