ROS-20241203-04

🗓️ 03 Dec 2024 00:00:00Reported by RedosType

A vulnerability in Kubernetes virtual machine cluster management. Allows remote attacker to execute arbitrary code outside container boundarie

Reporter	Title	Published	Views	Family All 66
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM InfoSphere Information Server is affected by a vulnerability in Kubernetes kubelet (CVE-2024-10220)	28 Mar 202522:00	–	ibm
Tenable Nessus	Azure Linux 3.0 Security Update: kubernetes (CVE-2024-10220)	10 Feb 202500:00	–	nessus
Tenable Nessus	CBL Mariner 2.0 Security Update: kubernetes (CVE-2024-10220)	16 Jan 202500:00	–	nessus
Tenable Nessus	Photon OS 4.0: Kubernetes PHSA-2025-4.0-0769	20 Mar 202500:00	–	nessus
Tenable Nessus	Photon OS 5.0: Kubernetes PHSA-2025-5.0-0487	21 Mar 202500:00	–	nessus
Tenable Nessus	TencentOS Server 4: kubernetes (TSSA-2024:1093)	16 Jun 202500:00	–	nessus
Tenable Nessus	Unity Linux 20.1050e / 20.1070e Security Update: kubernetes (UTSA-2026-017390)	9 May 202600:00	–	nessus
Tenable Nessus	Linux Distros Unpatched Vulnerability : CVE-2024-10220	5 Mar 202500:00	–	nessus
BDU FSTEC	The vulnerability of the Kubernetes cluster management software lies in the incorrect path name limitation for the restricted access directory, allowing arbitrary code to be executed.	21 Nov 202400:00	–	bdu_fstec

OS	OS Version	Architecture	Package	Package Version	Filename
redos	7.3	x86_64	kubernetes	1.24.17-7	UNKNOWN

03 Dec 2024 00:00Current

7.7High risk

Vulners AI Score7.7

CVSS 3.18.1

EPSS0.39569

SSVC