Oracle Linux 7 / 8 : olcne (ELSA-2021-9028)

The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9028 advisory. - Kata CVE-2020-28914 kata-proxy - Address CVE-2020-28914: An improper file permissions vulnerability affects Kata Containers prior to 1.11.5 -...

olcne security update

kata-runtime 1.7.3-1.0.7 - Address CVE-2020-28914 kata 1.7.3-1.0.12 - UEKR6 guest kernel support 1.7.3-1.0.11 - Address CVE-2020-28914 kubernetes 1.17.9-1.0.6 - Kata CVE-2020-28914 olcne 1.1.10-1 - Address CVE-2020-28914: An improper file permissions vulnerability affects Kata Containers prior to...

Oracle Linux 7 : olcne (ELSA-2021-9029)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9029 advisory. - Address CVE-2020-28914 kata - Address CVE-2020-28914 kubernetes - Kata CVE-2020-28914 olcne - Address CVE-2020-28914: An improper file permissions...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.5.31 bug fix and security update

Red Hat OpenShift Container Platform release 4.5.31 is now available with updates to packages and images that fix several bugs. This release also includes a security update for Red Hat OpenShift Container Platform 4.5. Red Hat Product Security has rated this update as having a security impact of...

Security Bulletin: Vulnerabilities in psutil, python, and Golang affect IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift

Summary Vulnerabilities in psutil, python and Golang Go may affect IBM Spectrum Protect Plus Container backup and restore for Kubernetes and OpenShift. Vulnerability Details CVEID: CVE-2019-18874 DESCRIPTION: psutil is vulnerable to a denial of service, caused by a double free. By using...

Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability

...

Microsoft Azure and Microsoft Azure Kubernetes Security Feature Issue Vulnerabilities

Microsoft Azure and Microsoft Azure Kubernetes are both products of Microsoft Corporation, U.S.A. Microsoft Azure is a suite of open, enterprise-class cloud computing platforms.Microsoft Azure Kubernetes is a fully managed Kubernetes service. Provides serverless Kubernetes, a consolidated...

PT-2021-2084 · Microsoft · Azure Kubernetes Service

Name of the Vulnerable Software and Affected Versions: Microsoft Azure Kubernetes Service affected versions not specified Description: The issue is related to errors in privilege management in the Microsoft Azure Kubernetes Service. It may allow a remote attacker to elevate their privileges...

KLA12074 PE vulnerabilities in Microsoft Azure

An elevation of privilege vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Azure IoT CLI extension can be exploited remotely to gain...

Moderate: Red Hat Security Advisory: OpenShift Container Platform 4.6.16 extras security update

Red Hat OpenShift Container Platform release 4.6.16 is now available with updates to packages and images that fix several bugs. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

Kubernetes: API Server DoS (crash?) if many large resources (~1MB each) are concurrently/repeatedly sent to an external Validating WebHook endpoint

Report Submission Form Summary: I was trying to explore a way to stealthily send lots of data outside a private GKE cluster by way of misusing the Validating Webhook mechanism. The idea would be that a cluster-admin could install a webhook and then initiate resources like a secret or configmap th...

CVE-2021-21303

Helm is open-source software which is essentially "The Kubernetes Package Manager". Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. In Helm from version 3.0 and before version 3.5.2, there a few cases where data loaded from potentially untrusted...

CVE-2021-21303

Helm is open-source software which is essentially "The Kubernetes Package Manager". Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. In Helm from version 3.0 and before version 3.5.2, there a few cases where data loaded from potentially untrusted...

Design/Logic Flaw

Helm is open-source software which is essentially "The Kubernetes Package Manager". Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. In Helm from version 3.0 and before version 3.5.2, there a few cases where data loaded from potentially untrusted...

CVE-2021-21303

Helm is open-source software which is essentially "The Kubernetes Package Manager". Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. In Helm from version 3.0 and before version 3.5.2, there a few cases where data loaded from potentially untrusted...

CVE-2021-21303

CVE-2021-21303 affects Helm (Kubernetes package manager) prior to 3.5.2, where multiple fields in repository/index data and chart/plugin YAML could be unsanitized. The root cause is insufficient sanitization of data loaded from untrusted sources (index.yaml fields, Chart.yaml, plugin.yaml), allow...

CVE-2021-21303 Injection attack in Helm

Helm is open-source software which is essentially "The Kubernetes Package Manager". Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. In Helm from version 3.0 and before version 3.5.2, there a few cases where data loaded from potentially untrusted...

CVE-2021-21303

Helm is open-source software which is essentially "The Kubernetes Package Manager". Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. In Helm from version 3.0 and before version 3.5.2, there a few cases where data loaded from potentially untrusted...

EulerOS 2.0 SP9 : kata-containers (EulerOS-SA-2021-1264)

According to the version of the kata-containers package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - containerd is an industry-standard container runtime and is available as a daemon for Linux and Windows. In containerd before versions 1.3....

Kubernetes: Node Validation Admission does not observe all oldObject fields

Summary: The Validating Admission webhook for Node Objects is passing oldObject fields incorrectly on AdmissionReview.Request. It was identified initially in metadata.labels, but a list of impacted fields follows below: oldNode.Spec.PodCIDRs oldNode.Spec.ProviderID oldNode.Spec.ConfigSource...