CVE-2020-2024 - CVE House
Back to Database
Status published Medium CVE-2020-2024

Kata Containers - Guests can trick the kata-runtime into unmounting any mount point on the host

Vulnerability Description

An improper link resolution vulnerability affects Kata Containers versions prior to 1.11.0. Upon container teardown, a malicious guest can trick the kata-runtime into unmounting any mount point on the host and all mount points underneath it, potentiality resulting in a host DoS.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-2024

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Yuval Avrahami, Palo Alto Networks

References

More from Kata Containers

View All →
CVE-2020-2026
Kata Containers - Guests can trick the kata-runtime into mounting the container image on any host path
High 7.8
CVE-2020-2025
Kata Containers - Cloud Hypervisor guests persist filesystem changes to the underlying host image file
High 8.8
CVE-2020-2023
Kata Containers - Containers have access to the guest root filesystem device
Low 3.8

Affected Vendor

Kata Containers

View all reports →

Affected Software

Kata Containers
Vulnerable Versions:
unspecified

Timeline

Official Publish: May 19th, 2020
Last Modified: September 17th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Weaknesses (CWE)

CWE-59

MITRE ATT&CK TTPs

T1574 Hijack Execution Flow
Privilege Escalation
T1222 File and Directory Permissions Modification
Defense Evasion
T1005 Data from Local System
Collection
T1565 Data Manipulation
Impact
T1078 Valid Accounts
Persistence