What is CVE-2020-14316?

CVE-2020-14316 is a critical-severity vulnerability in Kubevirt. CVSS score: 9.9/10. Published 2020-07-29.

How severe is CVE-2020-14316?

Critical severity. CVSS v3 base score is 9.9 out of 10.

Vulnerability in Kubevirt

CVE-2020-14316

A flaw was found in kubevirt 0.29 and earlier. Virtual Machine Instances (VMIs) can be used to gain access to the host's filesystem. Successful exploitation allows an attacker to assume the privileges of the VM process on the host system…

EPSS: 0.016 (72.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.9 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.

Affected products

Kubevirt
Redhat Openshift_virtualization — versions 1
N/a Kubevirt — versions All versions before kubevirt 0.30.

References

secalert@redhat.com (Patch, Third Party Advisory, x_refsource_MISC, Issue Tracking)

Frequently asked questions

What is CVE-2020-14316?: CVE-2020-14316 is a critical-severity vulnerability in Kubevirt. CVSS score: 9.9/10. Published 2020-07-29.
How severe is CVE-2020-14316?: Critical severity. CVSS v3 base score is 9.9 out of 10.