Lucene search

K
cvelistGitHub_MCVELIST:CVE-2023-26484
HistoryMar 15, 2023 - 8:40 p.m.

CVE-2023-26484 On a compromised KubeVirt node, the virt-handler service account can be used to modify all node specs

2023-03-1520:40:17
CWE-863
GitHub_M
www.cve.org
3
security vulnerability
kubevirt
compromised node
node specs modification
kubernetes
cluster access

CVSS3

8.2

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

AI Score

8.2

Confidence

High

EPSS

0.001

Percentile

27.5%

KubeVirt is a virtual machine management add-on for Kubernetes. In versions 0.59.0 and prior, if a malicious user has taken over a Kubernetes node where virt-handler (the KubeVirt node-daemon) is running, the virt-handler service account can be used to modify all node specs. This can be misused to lure-in system-level-privileged components which can, for instance, read all secrets on the cluster, or can exec into pods on other nodes. This way, a compromised node can be used to elevate privileges beyond the node until potentially having full privileged access to the whole cluster. The simplest way to exploit this, once a user could compromise a specific node, is to set with the virt-handler service account all other nodes to unschedulable and simply wait until system-critical components with high privileges appear on its node. No patches are available as of time of publication. As a workaround, gatekeeper users can add a webhook which will block the virt-handler service account to modify the spec of a node.

CNA Affected

[
  {
    "vendor": "kubevirt",
    "product": "kubevirt",
    "versions": [
      {
        "version": "<= 0.59.0",
        "status": "affected"
      }
    ]
  }
]

CVSS3

8.2

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N

AI Score

8.2

Confidence

High

EPSS

0.001

Percentile

27.5%