Moderate Photon OS Security Update - PHSA-2024-5.0-91-0428

Updates of 'calico-bird', 'mariadb' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2024-5.0-0428

Updates of 'mariadb', 'calico-bird' packages of Photon OS have been released...

Photon OS 4.0: Calico PHSA-2023-4.0-0518

An update of the calico package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0518. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Calico PHSA-2024-4.0-0605

An update of the calico package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0605. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Calico PHSA-2023-4.0-0427

An update of the calico package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0427. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Calico PHSA-2023-3.0-0603

An update of the calico package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0603. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Calico PHSA-2023-5.0-0152

An update of the calico package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0152. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Calico PHSA-2021-3.0-0247

An update of the calico package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0247. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Calico PHSA-2023-5.0-0037

An update of the calico package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0037. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 3.0: Calico PHSA-2023-3.0-0631

An update of the calico package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-3.0-0631. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Calico PHSA-2024-5.0-0266

An update of the calico package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0266. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Calico PHSA-2023-4.0-0415

An update of the calico package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-4.0-0415. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 5.0: Calico PHSA-2023-5.0-0049

An update of the calico package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2023-5.0-0049. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

GO-2024-2801 Calico privilege escalation vulnerability in github.com/projectcalico/calico

Calico privilege escalation vulnerability in github.com/projectcalico/calico. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please...

SUSE CVE-2020-13597

Clusters using Calico version 3.14.0 and below, Calico Enterprise version 2.8.2 and below, may be vulnerable to information disclosure if IPv6 is enabled but unused. A compromised pod with sufficient privilege is able to reconfigure the node's IPv6 interface due to the node accepting route...

Moderate Photon OS Security Update - PHSA-2024-5.0-0266

Updates of 'calico' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2024-4.0-0605

Updates of 'calico' packages of Photon OS have been released...

Privilege Escalation

github.com/projectcalico/calico/ is vulnerable to Privilege Escalation. The vulnerability is due to an incorrect SUID bit configuration in the Calico CNI install binary, combined with the ability to control the input binary, allows an attacker to execute an arbitrary binary with elevated privileg...

GHSA-6362-GV4M-53WW Calico privilege escalation vulnerability

In vulnerable versions of Calico v3.27.2 and below, Calico Enterprise v3.19.0-1, v3.18.1, v3.17.3 and below, and Calico Cloud v19.2.0 and below, an attacker who has local access to the Kubernetes node, can escalate their privileges by exploiting a vulnerability in the Calico CNI install binary. T...

Calico privilege escalation vulnerability

In vulnerable versions of Calico v3.27.2 and below, Calico Enterprise v3.19.0-1, v3.18.1, v3.17.3 and below, and Calico Cloud v19.2.0 and below, an attacker who has local access to the Kubernetes node, can escalate their privileges by exploiting a vulnerability in the Calico CNI install binary. T...