A malicious guest compromised before a container creation (e.g. a malicious guest image or a guest running multiple containers) can trick the kata runtime into mounting the untrusted container filesystem on any host path, potentially allowing for code execution on the host. This issue affects: Kata Containers 1.11 versions earlier than 1.11.1; Kata Containers 1.10 versions earlier than 1.10.5; Kata Containers 1.9 and earlier versions.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A malicious guest compromised before a container creation (e.g. a malicious guest image or a guest running
    multiple containers) can trick the kata runtime into mounting the untrusted container filesystem on any
    host path, potentially allowing for code execution on the host. This issue affects: Kata Containers 1.11
    versions earlier than 1.11.1; Kata Containers 1.10 versions earlier than 1.10.5; Kata Containers 1.9 and
    earlier versions. (CVE-2020-2026)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5765 advisory.

    - x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross)  [Orabug: 31446720]     {CVE-2020-0543}
    - x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Mark Gross)  [Orabug:
    31446720]  {CVE-2020-0543}
    - x86/cpu: Add 'table' argument to cpu_matches() (Mark Gross)  [Orabug: 31446720]  {CVE-2020-0543}
    - x86/cpu: Add a steppings field to struct x86_cpu_id (Mark Gross)  [Orabug: 31446720]  {CVE-2020-0543}
    - Address Kata CVE-2020-2023
    - Address Kata CVE-2020-2024
    - Address Kata CVE-2020-2025
    - Address Kata CVE-2020-2026

    kata
    - Address CVE-2020-2023
    - Address CVE-2020-2024
    - Address CVE-2020-2025
    - Address CVE-2020-2026

    kubernetes
    - CVE-2020-8559: Privilege escalation from compromised node to cluster
    - CVE-2020-8557: Node disk DOS by writing to container /etc/hosts
    - Update dependency on Kata containers to a build that includes fixes for CVE-2020-2023 thru CVE-2020-2026

    kubernetes
    - CVE-2020-15104:
      Incorrect validation of wildcard DNS Subject Alternative Names
    - CVE-2020-8559: Privilege escalation from compromised node to cluster
    - CVE-2020-8557: Node disk DOS by writing to container /etc/hosts
    - Update Kubernetes to use Kata 1.7.3-1.0.7 to address CVE-2020-2023 thru CVE-2020-2026

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5766 advisory.

    - x86/speculation: Add SRBDS vulnerability and mitigation documentation (Mark Gross)  [Orabug: 31446720]     {CVE-2020-0543}
    - x86/speculation: Add Special Register Buffer Data Sampling (SRBDS) mitigation (Mark Gross)  [Orabug:
    31446720]  {CVE-2020-0543}
    - x86/cpu: Add 'table' argument to cpu_matches() (Mark Gross)  [Orabug: 31446720]  {CVE-2020-0543}
    - x86/cpu: Add a steppings field to struct x86_cpu_id (Mark Gross)  [Orabug: 31446720]  {CVE-2020-0543}
    - Address Kata CVE-2020-2023
    - Address Kata CVE-2020-2024
    - Address Kata CVE-2020-2025
    - Address Kata CVE-2020-2026

    kata
    - Address CVE-2020-2023
    - Address CVE-2020-2024
    - Address CVE-2020-2025
    - Address CVE-2020-2026


    kubernetes
    - CVE-2020-8559: Privilege escalation from compromised node to cluster
    - CVE-2020-8557: Node disk DOS by writing to container /etc/hosts
    - Update dependency on Kata containers to a build that includes fixes for CVE-2020-2023 thru CVE-2020-2026

    olcne
    - CVE-2020-8559: Privilege escalation from compromised node to cluster
    - CVE-2020-8557: Node disk DOS by writing to container /etc/hosts

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security fix for CVE-2020-2026

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for [PUT CVEs HERE]

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
412504	SCA: security update for github.com/kata-containers/runtime (GHSA-877x-32pm-p28x)	Tenable Cloud Security	SCA Checks	high
412504	SCA: security update for github.com/kata-containers/runtime (GHSA-877x-32pm-p28x)	Tenable Self-Hosted Container Security	SCA Checks	high
180974	Oracle Linux 7 : Unbreakable Enterprise kernel-container kata-image kata-runtime kata kubernetes kubernetes istio olcne (ELSA-2020-5765)	Nessus	Oracle Linux Local Security Checks	high
180954	Oracle Linux 7 : Unbreakable Enterprise kernel-container kata-image kata-runtime kata kubernetes olcne (ELSA-2020-5766)	Nessus	Oracle Linux Local Security Checks	high
142586	Fedora 31 : kata-ksm-throttler (2020-15a1bde727)	Nessus	Fedora Local Security Checks	high
142564	Fedora 31 : kata-osbuilder (2020-61fcf3ffc7)	Nessus	Fedora Local Security Checks	high
142527	Fedora 31 : kata-shim (2020-1af9cd8c87)	Nessus	Fedora Local Security Checks	high
141524	Fedora 31 : kata-runtime (2020-7a0b6071a4)	Nessus	Fedora Local Security Checks	high
141520	Fedora 31 : kata-proxy (2020-2f5879aeb6)	Nessus	Fedora Local Security Checks	high
141519	Fedora 31 : kata-agent (2020-c33083813d)	Nessus	Fedora Local Security Checks	high

Detections

Analytics

CVE-2020-2026

high

Tenable Plugins

high

high

high

high

high

high

high

high

high

high