Low severity3.8NVD Advisory· Published Jun 10, 2020· Updated Jun 17, 2026
CVE-2020-2023
CVE-2020-2023
Description
Kata Containers doesn't restrict containers from accessing the guest's root filesystem device. Malicious containers can exploit this to gain code execution on the guest and masquerade as the kata-agent. This issue affects Kata Containers 1.11 versions earlier than 1.11.1; Kata Containers 1.10 versions earlier than 1.10.5; and Kata Containers 1.9 and earlier versions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/kata-containers/agentGo | < 1.9.1 | 1.9.1 |
github.com/kata-containers/agentGo | >= 1.10.0, < 1.10.5 | 1.10.5 |
github.com/kata-containers/agentGo | >= 1.11.0, < 1.11.1 | 1.11.1 |
github.com/kata-containers/runtimeGo | < 1.9.1 | 1.9.1 |
github.com/kata-containers/runtimeGo | >= 1.10.0, < 1.10.5 | 1.10.5 |
github.com/kata-containers/runtimeGo | >= 1.11.0, < 1.11.1 | 1.11.1 |
Affected products
4- ghsa-coords2 versions
< 1.9.1+ 1 more
- (no CPE)range: < 1.9.1
- (no CPE)range: < 1.9.1
- Range: 1.11
Patches
Vulnerability mechanics
References
9- github.com/kata-containers/agent/pull/792nvdPatchWEB
- github.com/kata-containers/runtime/issues/2488nvdPatchThird Party AdvisoryWEB
- github.com/kata-containers/runtime/pull/2477nvdPatchThird Party AdvisoryWEB
- github.com/kata-containers/runtime/pull/2487nvdPatchThird Party AdvisoryWEB
- github.com/advisories/GHSA-6978-vg2j-cc9qghsaADVISORY
- github.com/kata-containers/agent/issues/791nvdThird Party AdvisoryWEB
- github.com/kata-containers/runtime/releases/tag/1.10.5nvdRelease NotesThird Party AdvisoryWEB
- github.com/kata-containers/runtime/releases/tag/1.11.1nvdRelease NotesThird Party AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2020-2023ghsaADVISORY
News mentions
0No linked articles in our index yet.