GO-2024-2801 Calico privilege escalation vulnerability in github.com/projectcalico/calico

Calico privilege escalation vulnerability in github.com/projectcalico/calico. NOTE: The source advisory for this report contains additional versions that could not be automatically mapped to standard Go module versions. If this is causing false-positive reports from vulnerability scanners, please...

SUSE CVE-2020-13597

Clusters using Calico version 3.14.0 and below, Calico Enterprise version 2.8.2 and below, may be vulnerable to information disclosure if IPv6 is enabled but unused. A compromised pod with sufficient privilege is able to reconfigure the node's IPv6 interface due to the node accepting route...

Moderate Photon OS Security Update - PHSA-2024-5.0-0266

Updates of 'calico' packages of Photon OS have been released...

Moderate Photon OS Security Update - PHSA-2024-4.0-0605

Updates of 'calico' packages of Photon OS have been released...

Privilege Escalation

github.com/projectcalico/calico/ is vulnerable to Privilege Escalation. The vulnerability is due to an incorrect SUID bit configuration in the Calico CNI install binary, combined with the ability to control the input binary, allows an attacker to execute an arbitrary binary with elevated privileg...

GHSA-6362-GV4M-53WW Calico privilege escalation vulnerability

In vulnerable versions of Calico v3.27.2 and below, Calico Enterprise v3.19.0-1, v3.18.1, v3.17.3 and below, and Calico Cloud v19.2.0 and below, an attacker who has local access to the Kubernetes node, can escalate their privileges by exploiting a vulnerability in the Calico CNI install binary. T...

Calico privilege escalation vulnerability

In vulnerable versions of Calico v3.27.2 and below, Calico Enterprise v3.19.0-1, v3.18.1, v3.17.3 and below, and Calico Cloud v19.2.0 and below, an attacker who has local access to the Kubernetes node, can escalate their privileges by exploiting a vulnerability in the Calico CNI install binary. T...

CVE-2024-33522

In vulnerable versions of Calico v3.27.2 and below, Calico Enterprise v3.19.0-1, v3.18.1, v3.17.3 and below, and Calico Cloud v19.2.0 and below, an attacker who has local access to the Kubernetes node, can escalate their privileges by exploiting a vulnerability in the Calico CNI install binary. T...

CVE-2024-33522 Privilege escalation in Calico CNI install binary

In vulnerable versions of Calico v3.27.2 and below, Calico Enterprise v3.19.0-1, v3.18.1, v3.17.3 and below, and Calico Cloud v19.2.0 and below, an attacker who has local access to the Kubernetes node, can escalate their privileges by exploiting a vulnerability in the Calico CNI install binary. T...

CVE-2024-33522

CVE-2024-33522 affects Calico CNI installations where vulnerable releases (Calico <= v3.27.2, Enterprise <= v3.19.0-1, v3.18.1, v3.17.3 and below, Cloud

CVE-2024-33522 Privilege escalation in Calico CNI install binary

In vulnerable versions of Calico v3.27.2 and below, Calico Enterprise v3.19.0-1, v3.18.1, v3.17.3 and below, and Calico Cloud v19.2.0 and below, an attacker who has local access to the Kubernetes node, can escalate their privileges by exploiting a vulnerability in the Calico CNI install binary. T...

CVE-2024-33522 Privilege escalation in Calico CNI install binary

In vulnerable versions of Calico v3.27.2 and below, Calico Enterprise v3.19.0-1, v3.18.1, v3.17.3 and below, and Calico Cloud v19.2.0 and below, an attacker who has local access to the Kubernetes node, can escalate their privileges by exploiting a vulnerability in the Calico CNI install binary. T...

Calico 安全漏洞

Tigera Calico is an open source cybersecurity solution for container, virtual machine, and host workloads from Tigera USA. A security vulnerability exists in Calico, Calico Enterprise, and Calico Cloud. An attacker could exploit the vulnerability to execute arbitrary binaries with elevated...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, kots, stakater-reloader, flux-image-automation-controller, cadvisor, kube-rbac-proxy-fips, crossplane, nats, protoc-gen-go-grpc, crossplane-provider-azure-authorization, aws-load-balancer-controller, prometheus-stackdriver-exporter...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: wavefront-collector-for-kubernetes, kots, stakater-reloader, flux-image-automation-controller, cadvisor, kube-rbac-proxy-fips, crossplane, nats, protoc-gen-go-grpc, crossplane-provider-azure-authorization, aws-load-balancer-controller, prometheus-stackdriver-exporter...

olcne security update

conmon 2.1.3-7 - Resolve CVE-2023-39325 2.1.3-6 - Add ol8baseoslatest, and ol9baseoslatest, to Jenkinsfile 2.1.3-5 - Add systemd-devel as build requirement 2.1.3-4 - Add support ARM build 2.1.3.3 - Add OL9 support 2.1.3.2 - Update inline with Linux team building conmon for all but OL7. cri-o...

Important Photon OS Security Update - PHSA-2023-3.0-0690

Updates of 'calico' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-4.0-0518

Updates of 'calico', 'mysql' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-0152

Updates of 'calico' packages of Photon OS have been released...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: spark-operator, prometheus-adapter, nodetaint, aws-efs-csi-driver, kubernetes-dns-node-cache, ip-masq-agent...