CVE-2020-2025 - CVE House
Back to Database
Status published High CVE-2020-2025

Kata Containers - Cloud Hypervisor guests persist filesystem changes to the underlying host image file

Vulnerability Description

Kata Containers before 1.11.0 on Cloud Hypervisor persists guest filesystem changes to the underlying image file on the host. A malicious guest can overwrite the image file to gain control of all subsequent guest VMs. Since Kata Containers uses the same VM image file with all VMMs, this issue may also affect QEMU and Firecracker based guests.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-2025

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Yuval Avrahami, Palo Alto Networks

References

More from Kata Containers

View All →
CVE-2020-2026
Kata Containers - Guests can trick the kata-runtime into mounting the container image on any host path
High 7.8
CVE-2020-2024
Kata Containers - Guests can trick the kata-runtime into unmounting any mount point on the host
Medium 6.5
CVE-2020-2023
Kata Containers - Containers have access to the guest root filesystem device
Low 3.8

Affected Vendor

Kata Containers

View all reports →

Affected Software

Kata Containers
Vulnerable Versions:
unspecified

Timeline

Official Publish: May 19th, 2020
Last Modified: September 16th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses (CWE)

CWE-284

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1068 Exploitation for Privilege Escalation
Privilege Escalation
T1078 Valid Accounts
Persistence
T1213 Data from Information Repositories
Collection
T1565.002 Stored Data Manipulation
Impact