Approved changes feed: RSS · Atom

cpe:2.3:a:katacontainers:kata-containers:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorKatacontainers (ab065ca3-1681-55db-8fae-b44b1eaedf14)
ProductKata Containers (0bb9cbd5-7800-5c0a-9652-7d62a4b75dcc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/kata-containers purl2cpe 2026-06-01 10:13:44.782520
pkg:github/kata-containers/kata-containers purl2cpe 2026-06-01 10:13:44.782522
pkg:golang/github.com/kata-containers/kata-containers purl2cpe 2026-06-01 10:13:44.782524
pkg:rpm/fedora/kata-containers purl2cpe 2026-06-01 10:13:44.782525

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-28914 vulnerable 2026-06-08 05:23:56.574844 Details available
An improper file permissions vulnerability affects Kata Containers prior to 1.11.5. When using a Kubernetes hostPath volume and mounting either a file or directory into a container as readonly, the file/directory is mounted as readOnly inside the container, but is still writable inside the guest. For a container breakout situation, a malicious guest can potentially modify or delete files/directories expected to be read-only.
Published: 2020-11-17T21:23:33.000Z
Updated: 2024-08-04T16:41:00.143Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.