Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An improper file permissions vulnerability affects Kata Containers prior to 1.11.5. When using a Kubernetes hostPath volume and mounting either a file or directory into a container as readonly, the file/directory is mounted as readOnly inside the container, but is still writable inside the guest. For a container breakout situation, a malicious guest can potentially modify or delete files/directories expected to be read-only.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Kata Containers 安全漏洞
Vulnerability Description
Kata Containers是Kata Containers社区的一款开源的轻量级虚拟机构建程序。 Kata Containers 1.11.5之前版本存在安全漏洞，该漏洞源于一个不适当的文件权限漏洞会影响Kata容器。当使用Kubernetes hostPath卷并将文件或目录作为只读挂载到容器中时，该文件目录在容器中挂载为只读，但在来宾中仍然是可写的。对于容器爆发情况，恶意客户可能会修改或删除预期为只读的文件目录。
CVSS Information
N/A
Vulnerability Type
N/A