CVE-2023-42816

CVE-2023-42816 describes a denial-of-service vulnerability in Kyverno’s Notary verifier component. If an attacker gains control of the registry Kyverno fetches signatures from, they can return a malicious response during signature verification, causing Kyverno to crash and block subsequent admiss...

CVE-2023-42816 Denial of service from malicious signature in kyverno

Kyverno is a policy engine designed for Kubernetes. A security vulnerability was found in Kyverno where an attacker could cause denial of service of Kyverno. The vulnerability was in Kyvernos Notary verifier. An attacker would need control over the registry from which Kyverno would fetch...

Kyverno security breach

Kyverno is a policy engine for Kubernetes open-sourced by Kyverno. A security vulnerability exists in versions prior to Kyverno v1.11.0. An attacker exploited the vulnerability to cause a denial of service on the system...

Kyverno security breach

Kyverno is a policy engine for Kubernetes open-sourced by Kyverno. A security vulnerability exists in versions prior to Kyverno v1.11.0. An attacker exploited the vulnerability to cause a denial of service on the system...

GHSA-8PGV-569H-W5RW vulnerabilities

Vulnerabilities for packages: kine, metrics-server, rancher-webhook, kubevela, kubernetes, temporal-fips, volume-modifier-for-k8s, temporal, rancher-webhook-fips, kube-oidc-proxy, metrics-server-fips, k3s, kubescape, temporal-server, cri-tools, kubernetes-csi-external-resizer, buildkitd,...

GHSA-8PGV-569H-W5RW vulnerabilities

Vulnerabilities for packages: temporal, buildkitd, k3s, envoy-ratelimit, docker-compose, volume-modifier-for-k8s, metrics-server, temporal-server, kubernetes, kubevela, kine, kubernetes-csi-external-resizer, kubescape, cri-tools...

Rocky Linux 8 : Satellite 6.14 (RLSA-2023:6818)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:6818 advisory. - A flaw was found in all versions of kubeclient up to but not including v4.9.3, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfi...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: kine, metrics-server, rancher-webhook, kubevela, kubernetes, temporal-fips, volume-modifier-for-k8s, temporal, rancher-webhook-fips, kube-oidc-proxy, metrics-server-fips, k3s, kubescape, temporal-server, cri-tools, kubernetes-csi-external-resizer, buildkitd,...

CVE-2023-47108 vulnerabilities

Vulnerabilities for packages: temporal, buildkitd, k3s, envoy-ratelimit, docker-compose, volume-modifier-for-k8s, metrics-server, temporal-server, kubernetes, kubevela, kine, kubernetes-csi-external-resizer, kubescape, cri-tools...

Security Bulletin: IBM Cloud Kubernetes Service is affected by Kubernetes Ingress Controller security vulnerabilities (CVE-2023-5043, CVE-2023-5044, CVE-2022-4886)

Summary IBM Cloud Kubernetes Service is affected by Kubernetes Ingress Controller security vulnerabilities where a user that can create or update Ingress objects can use the nginx.ingress.kubernetes.io/configuration-snippet annotation CVE-2023-5043 or the...

The vulnerability of the NMI component of the authentication management software in Kubernetes clusters – AAD Pod Identity – involves bypassing the verification token, allowing attackers to elevate their privileges.

The vulnerability of the NMI component in the Kubernetes AAD Pod Identity authentication management tool is related to errors in token assignment restrictions. Exploiting this vulnerability can allow attackers to increase their privileges...

CBL Mariner 2.0 Security Update: kubernetes (CVE-2020-8554)

The version of kubernetes installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2020-8554 advisory. - Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set...

NewStart CGSL MAIN 6.06 : neod Multiple Vulnerabilities (NS-SA-2023-0142)

The remote NewStart CGSL host, running version MAIN 6.06, has neod packages installed that are affected by multiple vulnerabilities: - runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rootfslinux.go incorrectl...

Key takeaways from the Wiz 2023 Kubernetes Security Report

Today, Wiz published its 2023 Kubernetes Security Report. Here are some key takeaways...

kubeclient: kubeconfig parsing error can lead to MITM attacks

A flaw was found in kubeclient, the Ruby client for Kubernetes REST API, in the way it parsed kubeconfig files. When the kubeconfig file does not configure custom CA to verify certs, kubeclient ends up accepting any certificate it wrongly returns VERIFYNONE. Ruby applications that leverage...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.11.53 packages and security update

Red Hat OpenShift Container Platform release 4.11.53 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.11. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.11.53 bug fix and security update

Red Hat OpenShift Container Platform release 4.11.53 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.11. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.42 bug fix and security update

Red Hat OpenShift Container Platform release 4.12.42 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.12.42 security and extras update

Red Hat OpenShift Container Platform release 4.12.42 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.12. Red Hat Product Security has rated this update as having a security impact of...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.11.53 security and extras update

Red Hat OpenShift Container Platform release 4.11.53 is now available with updates to packages and images that fix several bugs. This release includes a security update for Red Hat OpenShift Container Platform 4.11. Red Hat Product Security has rated this update as having a security impact of...