CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: cortex, kargo, nri-kubernetes, cloud-sql-proxy-fips, cloudflared, smarter-device-manager-fips, weaviate, smarter-device-manager, tigera-operator, prometheus-redis-exporter-fips, hugo-extended, cilium, timoni, atlantis, kube-logging-operator, gh, haproxy-ingress,...

SUSE CVE-2023-3893

A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes running kubernetes-csi-proxy...

Privilege Escalation

github.com/kubernetes-csi/csi-proxy is vulnerable to Privilege Escalation. The vulnerability is caused by insufficient input sanitization while constructing different commands from the input string passed to different functions implemented in pkg/os/volume/api.go and pkg/os/volume/api.go. A user...

UBUNTU-CVE-2023-3893

A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes running kubernetes-csi-proxy...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: up, spark-operator, vault-csi-provider, cortex, dynamic-localpv-provisioner-fips, prometheus-stackdriver-exporter, buildkitd, falcoctl-fips, metrics-server-fips, terraform-provider-sendgrid, prometheus-blackbox-exporter, smarter-device-manager-fips, dgraph,...

GHSA-M425-MQ94-257G vulnerabilities

Vulnerabilities for packages: aactl, dgraph, kubevela, spark-operator, kubescape, terraform-provider-sendgrid, k3d, scorecard, kubeflow, slsa-verifier, src, up, buildkitd, cortex...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, kpt, skaffold, rqlite, gomplate, scorecard, buildkitd, metrics-server, gitness, atlantis, k3d, bom, cortex, kubevela, helm, git-lfs, kubernetes-csi-livenessprobe, flux-notification-controller, mc, oauth2-proxy, dynamic-localpv-provisioner,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: fuse-overlayfs-snapshotter, kpt, skaffold, rqlite, gomplate, scorecard, buildkitd, metrics-server, gitness, atlantis, k3d, bom, cortex, kubevela, helm, git-lfs, kubernetes-csi-livenessprobe, flux-notification-controller, mc, oauth2-proxy, dynamic-localpv-provisioner,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: vault-csi-provider, cortex, kaf, kube-state-metrics, prometheus-stackdriver-exporter, memcached-exporter, falcoctl-fips, smarter-device-manager-fips, terraform, weaviate, hugo, kubernetes-csi-livenessprobe-fips, flux-kustomize-controller, flux-helm-controller, nghttp...

Kubernetes 安全漏洞

Kubernetes K8s is an open source system from the Cloud Native Computing Foundation for automating the deployment, scaling, and management of containerized applications. Kubernetes suffers from a security vulnerability that stems from the fact that a user who creates a Pod on a Windows node runnin...

PT-2023-4505 · Unknown · Kubernetes

Name of the Vulnerable Software and Affected Versions: Kubernetes affected versions not specified Description: A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes...

Insufficient input sanitization on kubernetes-csi-proxy leads to privilege escalation

CVSS Rating: CVSS:3.1/av:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - HIGH 8.8 A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if...

SUSE CVE-2019-11255

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...

GHSA-F4W6-3RH6-6Q4Q vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-provisioner...

GHSA-F4W6-3RH6-6Q4Q vulnerabilities

Vulnerabilities for packages: kubernetes-csi-external-provisioner...

GHSA-HP87-P4GW-J4GQ vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner, thanos-operator, thanos-operator-fips...

CVE-2022-28948 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner, thanos-operator, thanos-operator-fips...

CVE-2020-8569 Kubernetes CSI snapshot-controller DoS

Kubernetes CSI snapshot-controller prior to v2.1.3 and v3.0.2 could panic when processing a VolumeSnapshot custom resource when: - The VolumeSnapshot referenced a non-existing PersistentVolumeClaim and the VolumeSnapshot did not reference any VolumeSnapshotClass. - The snapshot-controller crashes...

kubernetes-csi: CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation

Improper input validation in Kubernetes CSI sidecar containers for external-provisioner v0.4.3, v1.0.2, v1.1, v1.2.2, v1.3.1, external-snapshotter v0.4.2, v1.0.2, v1.1, 1.2.2, and external-resizer v0.1, v0.2 could result in unauthorized PersistentVolume data access or volume mutation during...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.2 openshift-external-storage security update

An update for openshift-external-storage is now available for Red Hat OpenShift Container Platform 4.2. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availab...