| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/kata-containers/agent | ≥ 1.10.0, < 1.10.5≥ 1.11.0, < 1.11.1< 1.9.1 | 1.10.51.11.11.9.1 |
| github.com/kata-containers/runtime | ≥ 1.10.0, < 1.10.5≥ 1.11.0, < 1.11.1< 1.9.1 | 1.10.51.11.11.9.1 |
| runtime | ≥ 1.10, < 1.10.5≥ 1.11, < 1.11.1≤ 1.9 | 1.10.51.11.1 |
Kata Containers doesn't restrict containers from accessing the guest's root filesystem device. Malicious containers can exploit this to gain code execution on the guest and masquerade as the kata-agent. This issue affects Kata Containers 1.11 versions earlier than 1.11.1; Kata Containers 1.10 versions earlier than 1.10.5; and Kata Containers 1.9 and earlier versions.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free