Linux Distros Unpatched Vulnerability : CVE-2024-53095

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - smb: client: Fix use-after-free of network namespace. Recently, we got a customer report that CIFS triggers oops while reconnecting to a server. 0 The workload...

Linux Distros Unpatched Vulnerability : CVE-2024-53198

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - xen: Fix the issue of resource not being properly released in xenbusdevprobe This patch fixes an issue in the function xenbusdevprobe. In the xenbusdevprobe...

Linux Distros Unpatched Vulnerability : CVE-2025-24030

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Envoy Gateway is an open source project for managing Envoy Proxy as a standalone or Kubernetes-based application gateway. A user with access to the Kubernetes...

Low: ecs-init

Issue Overview: runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by sharing a volume between t...

Linux Distros Unpatched Vulnerability : CVE-2024-10220

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29...

Mastering Kubernetes: From Troubleshooting to Simplicity

...

Linux Distros Unpatched Vulnerability : CVE-2017-1000056

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Kubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admission plugin resulting in the ability to make use of any...

Linux Distros Unpatched Vulnerability : CVE-2020-10749

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perfor...

Linux Distros Unpatched Vulnerability : CVE-2017-1002102

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using a secret, configMap, projected or downwardAPI...

Linux Distros Unpatched Vulnerability : CVE-2018-1002100

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Kubernetes versions 1.5.x, 1.6.x, 1.7.x, 1.8.x, and prior to version 1.9.6, the kubectl cp command insecurely handles tar data returned from the container, a...

Linux Distros Unpatched Vulnerability : CVE-2017-1002101

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type...

GO-2025-3465 Node Denial of Service via kubelet Checkpoint API in k8s.io/kubernetes

Node Denial of Service via kubelet Checkpoint API in k8s.io/kubernetes...

Moderate: Red Hat Security Advisory: Red Hat Developer Hub 1.4.2 release.

Red Hat Developer Hub 1.4.2 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...

AZL-57462 CVE-2025-22868 affecting package kubernetes for versions less than 1.28.4-15

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

AZL-57303 CVE-2025-22869 affecting package kubernetes for versions less than 1.30.10-3

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

AZL-57428 CVE-2025-22869 affecting package kubernetes for versions less than 1.28.4-15

SSH servers which implement file transfer protocols are vulnerable to a denial of service attack from clients which complete the key exchange slowly, or not at all, causing pending content to be read into memory, but never transmitted...

AZL-57306 CVE-2025-22868 affecting package kubernetes for versions less than 1.30.10-3

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing...

GHSA-3Q2C-PVP5-3CQP vulnerabilities

Vulnerabilities for packages: flux, kubernetes-csi-livenessprobe, fuse-overlayfs-snapshotter, nri-cassandra, helm-push, amass, nri-nagios, hey, kubernetes-csi-external-resizer, litefs, newrelic-prometheus-configurator, petname, kpt, kubernetes-dns-node-cache, kustomize, docker-credential-gcr,...

GHSA-5FQ7-4MXC-535H vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe, fuse-overlayfs-snapshotter, helm-push, rclone, crane, mkcert, spicedb, hey, cosign, git-lfs, gobump, litefs, newrelic-prometheus-configurator, opa, kpt, kubernetes-dns-node-cache, petname, kustomize, docker-credential-gcr, flannel,...

GHSA-2JWV-JMQ4-4J3R vulnerabilities

Vulnerabilities for packages: kubernetes-csi-livenessprobe, fuse-overlayfs-snapshotter, helm-push, rclone, crane, mkcert, spicedb, hey, cosign, git-lfs, gobump, litefs, newrelic-prometheus-configurator, opa, kpt, kubernetes-dns-node-cache, petname, kustomize, docker-credential-gcr, flannel,...