Advisories · Technology
kata-containers.
Every CVE that names kata-containers among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.7 Medium
Kata Containers: Unauthorized mem-agent ttRPC methods let an untrusted host tamper with confidential-guest memory
- kata-containers
- Broken access control
- CVSS 9.6 CriticalCritical · CVSS 9+
Kata Containers: Config Path Annotation Arbitrary File Loading
- kata-containers
- Path traversal
- CWE-20
- CVSS 8.8 High
Kata Containers Runtime: Host block device can be hotplugged to the VM if the container image is malformed or contains no layers
- kata-containers
- CWE-754
- CVSS 6.9 Medium
Kata Containers coco-tdx malicious host can circumvent initdata verification
- kata-containers
- CWE-754
- CVSS 8.8 High
Kata Containers - Cloud Hypervisor guests persist filesystem changes to the underlying host image file
- Kata Containers
- Broken access control
- CVSS 6.5 Medium
Kata Containers - Guests can trick the kata-runtime into unmounting any mount point on the host
- Kata Containers
- Path traversal