CVE-2023-3955 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips, aws-efs-csi-driver, kubeflow-pipelines...

CVE-2023-3955 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver...

CVE-2023-3676 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips, kubernetes-csi-livenessprobe, k3d, dynamic-localpv-provisioner-fips, up, kiam, kubeflow-fips, prometheus-stackdriver-exporter, scorecard, metrics-server-fips, kubevela, aactl, volume-modifier-for-k8s-fips, prometheus-blackbox-exporter,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, up, kubeflow, dgraph, aactl, buildkitd, kubevela, k3d, slsa-verifier, src, cortex, spark-operator, scorecard, kubescape...

CVE-2023-44487 affecting package csi-driver-lvm for versions less than 0.4.1-13

CVE-2023-44487 affecting package csi-driver-lvm for versions less than 0.4.1-13. A patched version of the package is available...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: vertical-pod-autoscaler, prometheus-mongodb-exporter-fips, prometheus-mongodb-exporter, kiam, flux-kustomize-controller, prometheus-statsd-exporter, aws-ebs-csi-driver, metrics-server-fips, prometheus-adapter, nfs-subdir-external-provisioner,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: kiam, flux-kustomize-controller, metrics-server-fips, prometheus-adapter, prometheus-elasticsearch-exporter, grpcurl, secrets-store-csi-driver, pulumi-kubernetes-operator, envoy-ratelimit, src, terraform-provider-sendgrid-fips, minio, flux-helm-controller,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe, grype, k3d, terraform-provider-azurerm, ip-masq-agent, secrets-store-csi-driver, gobuster, kubevela, cue, gitness, envoy-ratelimit, bom, fuse-overlayfs-snapshotter, memcached-exporter, kubewatch, terraform-provider-aws, haproxy-ingress,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe, grype, k3d, terraform-provider-azurerm, ip-masq-agent, secrets-store-csi-driver, gobuster, kubevela, cue, gitness, envoy-ratelimit, bom, fuse-overlayfs-snapshotter, memcached-exporter, kubewatch, terraform-provider-aws, haproxy-ingress,...

AZL-31305 CVE-2023-44487 affecting package csi-driver-lvm for versions less than 0.4.1-13

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: kiam, flux-kustomize-controller, metrics-server-fips, prometheus-adapter, prometheus-elasticsearch-exporter, grpcurl, secrets-store-csi-driver, pulumi-kubernetes-operator, envoy-ratelimit, src, terraform-provider-sendgrid-fips, minio, flux-helm-controller,...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.13.3 security and bug fix update

Updated images that fix several bugs are now available for Red Hat OpenShift Data Foundation 4.13.3 on Red Hat Enterprise Linux 8 from Red Hat Container Registry. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS ba...

CVE-2023-43620

An issue was discovered in Croc through 9.6.5. A sender may place ANSI or CSI escape sequences in a filename to attack the terminal device of a receiver...

Design/Logic Flaw

An issue was discovered in Croc through 9.6.5. A sender may place ANSI or CSI escape sequences in a filename to attack the terminal device of a receiver...

CVE-2023-43620

An issue was discovered in Croc through 9.6.5. A sender may place ANSI or CSI escape sequences in a filename to attack the terminal device of a receiver...

CVE-2023-43620

An issue was discovered in Croc through 9.6.5. A sender may place ANSI or CSI escape sequences in a filename to attack the terminal device of a receiver...

Alert: New Kubernetes Vulnerabilities Enable Remote Attacks on Windows Endpoints

Three interrelated high-severity security flaws discovered in Kubernetes could be exploited to achieve remote code execution with elevated privileges on Windows endpoints within a cluster. The issues, tracked as CVE-2023-3676, CVE-2023-3893, and CVE-2023-3955, carry CVSS scores of 8.8 and impact...

Kubernetes 安全漏洞

Kubernetes K8s is an open source system from the Cloud Native Computing Foundation for automating the deployment, scaling, and management of containerized applications. Kubernetes suffers from a security vulnerability that stems from the fact that a user who creates a Pod on a Windows node runnin...

PT-2023-4505 · Unknown · Kubernetes

Name of the Vulnerable Software and Affected Versions: Kubernetes affected versions not specified Description: A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes...