漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
Kata Containers - Cloud Hypervisor guests persist filesystem changes to the underlying host image file
Vulnerability Description
Kata Containers before 1.11.0 on Cloud Hypervisor persists guest filesystem changes to the underlying image file on the host. A malicious guest can overwrite the image file to gain control of all subsequent guest VMs. Since Kata Containers uses the same VM image file with all VMMs, this issue may also affect QEMU and Firecracker based guests.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
访问控制不恰当
Vulnerability Title
Kata Containers 访问控制错误漏洞
Vulnerability Description
Kata Containers是Kata Containers社区的一款开源的轻量级虚拟机构建程序。 Kata Containers 1.11.0之前版本(在Cloud Hypervisor上)存在访问控制错误漏洞。攻击者利用该漏洞覆盖镜像文件,控制随后的虚拟机。
CVSS Information
N/A
Vulnerability Type
N/A