Lucene search

K
cgrChainguardCHAINGUARD:CVE-2023-39326
HistoryMay 15, 2024 - 9:07 p.m.

CVE-2023-39326 vulnerabilities

2024-05-1521:07:05
Chainguard
packages.cgr.dev
17
vulnerabilities
multiple software
packages
cve-2023-39326
security document

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

6.8 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

19.3%

Vulnerabilities for packages: tigera-operator, helm-push, cluster-autoscaler, sbom-scorecard, aws-flb-kinesis, aactl, aws-load-balancer-controller, sonobuoy, flannel-cni-plugin, kind, go-licenses, kubernetes-dashboard-metrics-scraper, kubernetes-csi-node-driver-registrar-fips, grpcurl, nsc, aws-flb-cloudwatch, kyverno-policy-reporter-kyverno-plugin, slsa-verifier, falco, gosu, cni-plugins-fips, kubernetes-csi-external-resizer, seldon-core-operator, nri-discovery-kubernetes, prometheus-beat-exporter-fips, prometheus-fips, kubernetes-csi-livenessprobe, prometheus-stackdriver-exporter, hey, newrelic-nri-kube-events, go-bindata, ctop, prometheus-bind-exporter, gitlab-logger, docker-cli, petname, scorecard, aws-ebs-csi-driver, cilium-envoy, kubernetes-csi-livenessprobe-fips, mage, prometheus-adapter-fips, cni-plugins, cortex, smarter-device-manager-fips, local-path-provisioner, go-md2man, aws-flb-firehose, calico-fips, ip-masq-agent, cass-operator, docker-credential-ecr-login, oras, bank-vaults-fips, influx, sops, prometheus-statsd-exporter-fips, prometheus-redis-exporter-fips, configmap-reload-fips, nats, fulcio-fips, goreleaser, cluster-autoscaler-fips, kyverno-policy-reporter, smarter-device-manager, dgraph, render-template, jsonnet-bundler, protoc-gen-go-grpc, stakater-reloader, vertical-pod-autoscaler, metrics-server, kyverno-policy-reporter-ui, k3d, amass, prometheus-statsd-exporter, gops, wait-for-port, gke-gcloud-auth-plugin, gobuster, configmap-reload, cass-operator-fips, kube-logging-logging-operator, kyverno

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

6.8 Medium

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.001 Low

EPSS

Percentile

19.3%