9030 matches found
PT-2021-6662 · Mysql Server +1 · Mysql Cluster +1
Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions 8.0.27 and prior Description: The issue is related to a heap-based buffer overflow in the MySQL Cluster component, which can be exploited to execute arbitrary code. This can allow a remote attacker to compromise the MyS...
PT-2021-6991 · Oracle +1 · Oracle Mysql Cluster +1
Name of the Vulnerable Software and Affected Versions: Oracle MySQL Cluster versions 7.4.35 and prior Oracle MySQL Cluster versions 7.5.25 and prior Oracle MySQL Cluster versions 7.6.21 and prior Oracle MySQL Cluster versions 8.0.28 and prior Description: The issue is related to a buffer overflow...
PT-2021-6682 · Mysql Server +1 · Mysql Cluster +1
Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions 8.0.27 and prior Description: The issue is related to a heap-based buffer overflow in the dynamic memory of the MySQL Cluster component. This can be exploited by a remote attacker to execute arbitrary code. The...
PT-2021-6665 · Oracle +1 · Mysql Cluster +1
Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions 7.4.34 and prior MySQL Cluster versions 7.5.24 and prior MySQL Cluster versions 7.6.20 and prior MySQL Cluster versions 8.0.27 and prior Description: The issue is related to a buffer overflow in memory in the MySQL...
PT-2021-6675 · Oracle +1 · Mysql Cluster +1
Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions 7.4.34 and prior MySQL Cluster versions 7.5.24 and prior MySQL Cluster versions 7.6.20 and prior MySQL Cluster versions 8.0.27 and prior Description: The issue is related to a buffer overflow in the memory of the MySQL...
PT-2021-6668 · Oracle +1 · Mysql Cluster +1
Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions 7.4.34 and prior MySQL Cluster versions 7.5.24 and prior MySQL Cluster versions 7.6.20 and prior MySQL Cluster versions 8.0.27 and prior Description: The issue is related to a buffer read overflow in memory, allowing a...
PT-2021-6989 · Oracle +1 · Oracle Mysql Cluster +1
Name of the Vulnerable Software and Affected Versions: Oracle MySQL Cluster versions 7.4.35 and prior Oracle MySQL Cluster versions 7.5.25 and prior Oracle MySQL Cluster versions 7.6.21 and prior Oracle MySQL Cluster versions 8.0.28 and prior Description: The issue is related to insufficient inpu...
PT-2021-6677 · Oracle +1 · Mysql Cluster +1
Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions 7.4.34 and prior MySQL Cluster versions 7.5.24 and prior MySQL Cluster versions 7.6.20 and prior MySQL Cluster versions 8.0.27 and prior Description: The issue is related to a buffer overflow on the stack in the MySQL...
PT-2021-6681 · Oracle +1 · Mysql Cluster +1
Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions 7.4.34 and prior MySQL Cluster versions 7.5.24 and prior MySQL Cluster versions 7.6.20 and prior MySQL Cluster versions 8.0.27 and prior Description: The issue is related to a buffer overflow in memory, allowing a remot...
CVE-2021-41254
kustomize-controller is a Kubernetes operator, specialized in running continuous delivery pipelines for infrastructure and workloads defined with Kubernetes manifests and assembled with Kustomize. Users that can create Kubernetes Secrets, Service Accounts and Flux Kustomization objects, could...
Design/Logic Flaw
kustomize-controller is a Kubernetes operator, specialized in running continuous delivery pipelines for infrastructure and workloads defined with Kubernetes manifests and assembled with Kustomize. Users that can create Kubernetes Secrets, Service Accounts and Flux Kustomization objects, could...
CVE-2021-41254
CVE-2021-41254 affects the Flux CD kustomize-controller, allowing authenticated users who can create Secrets, Service Accounts, and Flux Kustomization objects to have the controller execute shell commands inside its container via embedded Secrets. This enables running kubectl under the controller...
CVE-2021-41254 Privilege escalation to cluster admin on multi-tenant environments
kustomize-controller is a Kubernetes operator, specialized in running continuous delivery pipelines for infrastructure and workloads defined with Kubernetes manifests and assembled with Kustomize. Users that can create Kubernetes Secrets, Service Accounts and Flux Kustomization objects, could...
kustomize-controller 操作系统命令注入漏洞
kustomize-controller is a Kubernetes operator that specializes in running continuous delivery pipelines for infrastructure and workloads defined with a Kubernetes manifest and assembled using Kustomize. An operating system command injection vulnerability exists in versions prior to...
Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.4 images and security updates
Red Hat Advanced Cluster Management for Kubernetes 2.4.0 General Availability release images, which fix several bugs and security issues. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a...
CVE-2021-3948
An incorrect default permissions vulnerability was found in the mig-controller. Due to an incorrect cluster namespaces handling an attacker may be able to migrate a malicious workload to the target cluster, impacting confidentiality, integrity, and availability of the services located on that...
PT-2021-4880 · Kyverno +1 · Kyverno +4
Name of the Vulnerable Software and Affected Versions: kustomize-controller versions prior to 0.15.0 Description: The issue is related to the kustomize-controller, a Kubernetes operator for running continuous delivery pipelines. It allows users who can create Kubernetes Secrets, Service Accounts,...
Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.9.6 packages and security update
Red Hat OpenShift Container Platform release 4.9.6 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.9. Red Hat Product Security has rated this update as having a...
