512 matches found
DEBIAN-CVE-2023-52589
In the Linux kernel, the following vulnerability has been resolved: media: rkisp1: Fix IRQ disable race issue In rkisp1ispstop and rkisp1csidisable the driver masks the interrupts and then apparently assumes that the interrupt handler won't be running, and proceeds in the stop procedure. This is...
GHSA-8R3F-844C-MC37 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-livenessprobe, grype, docker-compose, kyverno-policy-reporter-ui, kube-state-metrics, k3d, terraform-provider-azurerm, sops, crossplane-provider-aws-iam, kine, grpc-health-probe, ip-masq-agent, cadvisor, secrets-store-csi-driver, kubernetes,...
CVE-2024-24786 vulnerabilities
Vulnerabilities for packages: prometheus-mongodb-exporter, kiam, flux-kustomize-controller, prometheus-statsd-exporter, rabbitmq-cluster-operator, helm-operator, spire-server, prometheus-adapter, configmap-reload, envoy-ratelimit, src, thanos, crossplane-provider-gcp, newrelic-nri-kube-events,...
CVE-2023-45289 vulnerabilities
Vulnerabilities for packages: kubernetes-csi-livenessprobe, grype, nri-kafka, vite, cni-plugins, kube-state-metrics, gosu, k3d, q, tailscale, nri-redis, flannel-cni-plugin, kine, nri-cassandra, ip-masq-agent, cadvisor, php-fpmexporter, sbomqs, gobuster, kube-rbac-proxy, kubevela, cue,...
CVE-2021-44716 affecting package csi-driver-lvm for versions less than 0.4.1-15
CVE-2021-44716 affecting package csi-driver-lvm for versions less than 0.4.1-15. A patched version of the package is available...
PT-2024-14634
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue arises from the rkisp1 isp stop and rkisp1 csi disable functions in the Linux kernel, where the driver masks interrupts and then proceeds with the stop procedure, assuming the...
CVE-2023-45285 vulnerabilities
Vulnerabilities for packages: stakater-reloader, vertical-pod-autoscaler, sbom-scorecard, kubernetes-csi-livenessprobe, helm-push, k3d, cni-plugins, amass, cni-plugins-fips, nats, prometheus-stackdriver-exporter, gosu, mage, ctop, scorecard, kubeflow-katib, flannel-cni-plugin, aactl, cass-operato...
GHSA-HQ6Q-C2X6-HMCH vulnerabilities
Vulnerabilities for packages: nodetaint, aws-efs-csi-driver-fips, spark-operator, aws-ebs-csi-driver, aws-efs-csi-driver, kubernetes-dns-node-cache, ip-masq-agent, prometheus-adapter...
GHSA-HQ6Q-C2X6-HMCH vulnerabilities
Vulnerabilities for packages: nodetaint, aws-efs-csi-driver, ip-masq-agent, prometheus-adapter, kubernetes-dns-node-cache, spark-operator...
CVE-2023-5528 vulnerabilities
Vulnerabilities for packages: nodetaint, aws-efs-csi-driver-fips, spark-operator, aws-ebs-csi-driver, aws-efs-csi-driver, kubernetes-dns-node-cache, ip-masq-agent, prometheus-adapter...
CVE-2023-47108 vulnerabilities
Vulnerabilities for packages: temporal, temporal-server, metrics-server, kine, buildkitd, docker-compose, kubernetes, kubernetes-csi-external-resizer, kubevela, cri-tools, k3s, volume-modifier-for-k8s, envoy-ratelimit, kubescape...
Important: Red Hat Bug Fix Advisory: LVMS 4.14.z Bug Fix and Enhancement update
Updated container images that fix multiple bugs are now available for LVMS 4.14.z. Logical volume manager storage LVMS uses the TopoLVM CSI driver to dynamically provision local storage on single node OpenShift clusters. Logical volume manager storage creates thin-provisioned volumes using the...
SUSE CVE-2023-3893
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes running kubernetes-csi-proxy...
Privilege Escalation
github.com/kubernetes-csi/csi-proxy is vulnerable to Privilege Escalation. The vulnerability is caused by insufficient input sanitization while constructing different commands from the input string passed to different functions implemented in pkg/os/volume/api.go and pkg/os/volume/api.go. A user...
GHSA-R6CC-7WJ7-GFX2 Kubernetes csi-proxy vulnerable to privilege escalation due to improper input validation
Kubernetes is vulnerable to privilege escalation when a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes running kubernetes-csi-proxy...
CVE-2023-3893
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes running kubernetes-csi-proxy...
UBUNTU-CVE-2023-3893
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes running kubernetes-csi-proxy...
CVE-2023-3893 Kubernetes - csi-proxy - Insufficient input sanitization leads to privilege escalation
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes running kubernetes-csi-proxy...
CVE-2023-3893 Kubernetes - csi-proxy - Insufficient input sanitization leads to privilege escalation
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes running kubernetes-csi-proxy...