Amazon Linux 2023 : amazon-efs-utils (ALAS2023-2023-437)

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-437 advisory. efs-utils is a set of Utilities for Amazon Elastic File System EFS. A potential race condition issue exists within the Amazon EFS mount helper in efs-utils versions v1.34.3 and below. When using TLS to...

Medium: amazon-efs-utils

Issue Overview: efs-utils is a set of Utilities for Amazon Elastic File System EFS. A potential race condition issue exists within the Amazon EFS mount helper in efs-utils versions v1.34.3 and below. When using TLS to mount file systems, the mount helper allocates a local port for stunnel to...

Amazon Linux 2 : amazon-efs-utils (ALAS-2023-2342)

The version of amazon-efs-utils installed on the remote host is prior to 1.35.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2023-2342 advisory. efs-utils is a set of Utilities for Amazon Elastic File System EFS. A potential race condition issue exists within the...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: prometheus-adapter, aws-efs-csi-driver-fips, aws-efs-csi-driver, spark-operator, ip-masq-agent, aws-ebs-csi-driver, kubernetes-dns-node-cache, nodetaint...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: nodetaint, aws-efs-csi-driver, ip-masq-agent, spark-operator, kubernetes-dns-node-cache, prometheus-adapter...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: nodetaint, aws-efs-csi-driver, ip-masq-agent, spark-operator, kubernetes-dns-node-cache, prometheus-adapter...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, aws-efs-csi-driver-fips, aws-efs-csi-driver, spark-operator, ip-masq-agent, aws-ebs-csi-driver, kubernetes-dns-node-cache, nodetaint...

Medium: amazon-efs-utils

Issue Overview: efs-utils is a set of Utilities for Amazon Elastic File System EFS. A potential race condition issue exists within the Amazon EFS mount helper in efs-utils versions v1.34.3 and below. When using TLS to mount file systems, the mount helper allocates a local port for stunnel to...

GHSA-7FXM-F474-HF8W vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips...

GHSA-Q78C-GWQW-JCMC vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver...

CVE-2023-3955 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver...

CVE-2023-3955 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver-fips, aws-efs-csi-driver...

CVE-2023-3676 vulnerabilities

Vulnerabilities for packages: aws-efs-csi-driver-fips...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: terraform-provider-sendgrid, kubevela, prometheus-stackdriver-exporter, scorecard, src, falcoctl-fips, timestamp-authority-fips, k3d, kubernetes-csi-livenessprobe, kubeflow-fips, slsa-verifier, spark-operator, volume-modifier-for-k8s-fips, up, kube-oidc-proxy,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: spark-operator, buildkitd, cortex, src, kubescape, up, slsa-verifier, aactl, kubevela, scorecard, kubeflow, dgraph, terraform-provider-sendgrid, k3d...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: metrics-server, falcoctl-fips, grpcurl, k8sgpt-operator, slsa-verifier, prometheus-statsd-exporter-fips, prometheus-mongodb-exporter, atlantis-fips, kubernetes-dashboard, kots, kpt, git-lfs, flux-image-automation-controller, dex, azure-aad-pod-identity-mic,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: metrics-server, scorecard, terraform-provider-azurerm, falcoctl-fips, grpcurl, grype, slsa-verifier, atlantis-fips, ip-masq-agent, kots, kpt, git-lfs, dex, newrelic-infrastructure-agent, frp, configmap-reload-fips, terraform-provider-aws,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: envoy-ratelimit, kaf, cosign, terraform-provider-azurerm, flux-helm-controller, mc, dex, pulumi, pulumi-language-yaml, kubeflow-katib, nginx-stable, oauth2-proxy, slsa-verifier, terraform-provider-aws, ollama, atlantis, secrets-store-csi-driver-provider-gcp, scorecar...

SUSE SLES12 Security Update : aws-efs-utils.11048 (SUSE-SU-2023:1761-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:1761-1 advisory. - CVE-2022-46174: Fixed potential tlsport selection collision by using state file as tlsport lock file bsc1206737. Tenable has extracted the...

SUSE-SU-2023:1761-1 Security update for aws-efs-utils.11048

This update for aws-efs-utils.11048 fixes the following issues: - CVE-2022-46174: Fixed potential tlsport selection collision by using state file as tlsport lock file bsc1206737...