298 matches found
OPENSUSE-SU-2024:13716-1 kubernetes1.24-apiserver-1.24.17-3.1 on GA media
These are all security issues fixed in the kubernetes1.24-apiserver-1.24.17-3.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13841-1 kubernetes1.29-apiserver-1.29.3-1.1 on GA media
These are all security issues fixed in the kubernetes1.29-apiserver-1.29.3-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13881-1 kubernetes1.28-apiserver-1.28.9-1.1 on GA media
These are all security issues fixed in the kubernetes1.28-apiserver-1.28.9-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:10901-1 kubernetes-apiserver-1.22.2-21.2 on GA media
These are all security issues fixed in the kubernetes-apiserver-1.22.2-21.2 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13838-1 kubernetes1.26-apiserver-1.26.15-1.1 on GA media
These are all security issues fixed in the kubernetes1.26-apiserver-1.26.15-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:13840-1 kubernetes1.28-apiserver-1.28.8-1.1 on GA media
These are all security issues fixed in the kubernetes1.28-apiserver-1.28.8-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12810-1 kubernetes1.25-apiserver-1.25.7-1.1 on GA media
These are all security issues fixed in the kubernetes1.25-apiserver-1.25.7-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12992-1 kubernetes1.27-apiserver-1.27.2-1.1 on GA media
These are all security issues fixed in the kubernetes1.27-apiserver-1.27.2-1.1 package on the GA media of openSUSE Tumbleweed...
ROS-20240522-03
A vulnerability in the KUBE-APISERVER component of the virtual machine cluster management software tool Kubernetes is related to the use of containers with a populated envFrom field.Exploitation of the vulnerability could allow an attacker acting remotely to launch containers bypassing the securi...
GO-2024-2748 Privilege Escalation in Kubernetes in k8s.io/apimachinery
The Kubernetes kube-apiserver is vulnerable to an unvalidated redirect on proxied upgrade requests that could allow an attacker to escalate privileges from a node compromise to a full cluster compromise...
SUSE CVE-2023-1260
An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given permissions "update, patch" the "pods/ephemeralcontainers" subresource beyond what the default is. They would then need to create a new pod or patch...
kubernetes: kube-apiserver: bypassing mountable secrets policy imposed by the ServiceAccount admission plugin
A flaw was found in Kubernetes' kube-apiserver. This flaw allows authenticated users to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated...
RHEL 7 / 8 : OpenShift Container Platform 4.10.56 (RHSA-2023:1655)
The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1655 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...
RHEL 8 : OpenShift Container Platform 4.11.46 (RHSA-2023:4312)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:4312 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud...
RHEL 9 : Red Hat build of MicroShift 4.14.0 (RHSA-2023:5008)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5008 advisory. Red Hat build of MicroShift is Red Hat's light-weight Kubernetes orchestration solution designed for edge device deployments and is built fr...
RHEL 8 / 9 : OpenShift Container Platform 4.13.0 (RHSA-2023:1325)
The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:1325 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...
GHSA-33C5-9FX5-FVJM Privilege Escalation in Kubernetes
The Kubernetes kube-apiserver in versions v1.6-v1.15, and versions prior to v1.16.13, v1.17.9 and v1.18.7 are vulnerable to an unvalidated redirect on proxied upgrade requests that could allow an attacker to escalate privileges from a node compromise to a full cluster compromise...
CVE-2024-3177
A flaw was found in Kubernetes' kube-apiserver. This flaw allows authenticated users to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated...
SUSE SLES15: containerized-data-importer-api / etc (SUSE-SU-2024:1157-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2024:1157-1 advisory. - rebuild against current security and bugfixes. Tenable has extracted the preceding description block directly from the SUSE...
