Vendor
Unauthorized mem-agent ttRPC methods in Kata Containers
1 TTP 1 CVEA vulnerability in the Kata Containers mem-agent component allows an untrusted host to invoke unauthorized ttRPC methods, resulting in potential memory tampering within confidential guest environments.
Kata Containers Guest-to-Host Root Escape via Virtiofs FUSE_SYMLINK
2 rules 1 TTP 1 CVEA vulnerability in Kata Containers allows a guest root user to escalate privileges to host root by exploiting the virtiofs shared file system to create arbitrary symlinks on the host.
Contrast CLI CopyFile Policy Subversion via Symlinks Allows Guest Root Filesystem Writes
2 rules 2 TTPsA vulnerability in the CopyFile verification of Kata agent policies generated by the Contrast CLI allows arbitrary writes to the guest root filesystem, potentially leading to a full guest takeover.
Kata Containers CopyFile Policy Subversion via Symlinks
3 rules 2 TTPs 1 CVEAn oversight in the CopyFile policy in Kata Containers allows untrusted hosts to write to arbitrary locations inside the guest workload image via symlinks, enabling binary overwrites and data exfiltration.