Command Injection affecting Windows nodes via nodes/*/logs/query API

Hello Kubernetes Community, A security vulnerability has been discovered in Kubernetes windows nodes that could allow a user with the ability to query a node's '/logs' endpoint to execute arbitrary commands on the host. This issue has been rated Medium with a CVSS v3.1 score of 5.9...

CVE-2024-10220 affecting package kubernetes for versions less than 1.28.4-14

CVE-2024-10220 affecting package kubernetes for versions less than 1.28.4-14. A patched version of the package is available...

CVE-2024-45338 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-24

CVE-2024-45338 affecting package application-gateway-kubernetes-ingress for versions less than 1.4.0-24. A patched version of the package is available...

CVE-2024-45338 affecting package kubernetes for versions less than 1.28.4-13

CVE-2024-45338 affecting package kubernetes for versions less than 1.28.4-13. A patched version of the package is available...

The vulnerability of the Rancher Manager software for managing Kubernetes clusters lies in the improper assignment of permissions to critical resources, allowing attackers to increase their privileges.

The vulnerability of the Rancher Manager software for managing Kubernetes clusters is related to the improper assignment of permissions to critical resources. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

CVE-2022-3064 affecting package application-gateway-kubernetes-ingress 1.4.0-27

CVE-2022-3064 affecting package application-gateway-kubernetes-ingress 1.4.0-27. This CVE either no longer is or was never applicable...

CVE-2021-4235 affecting package application-gateway-kubernetes-ingress 1.4.0-27

CVE-2021-4235 affecting package application-gateway-kubernetes-ingress 1.4.0-27. This CVE either no longer is or was never applicable...

CVE-2021-25741 affecting package kubernetes-1.21.2 1.21.2-7

CVE-2021-25741 affecting package kubernetes-1.21.2 1.21.2-7. No patch is available currently...

CVE-2020-8563 affecting package kubernetes-1.18.19 1.18.19-2

CVE-2020-8563 affecting package kubernetes-1.18.19 1.18.19-2. No patch is available currently...

CVE-2020-8563 affecting package kubernetes-1.18.17 1.18.17-6

CVE-2020-8563 affecting package kubernetes-1.18.17 1.18.17-6. No patch is available currently...

CVE-2021-25741 affecting package kubernetes-1.19.13 1.19.13-5

CVE-2021-25741 affecting package kubernetes-1.19.13 1.19.13-5. No patch is available currently...

CVE-2021-25741 affecting package kubernetes-1.20.7 1.20.7-9

CVE-2021-25741 affecting package kubernetes-1.20.7 1.20.7-9. No patch is available currently...

CVE-2020-8563 affecting package kubernetes-1.18.17 1.18.17-9

CVE-2020-8563 affecting package kubernetes-1.18.17 1.18.17-9. No patch is available currently...

CVE-2021-25741 affecting package kubernetes-1.20.9 1.20.9-7

CVE-2021-25741 affecting package kubernetes-1.20.9 1.20.9-7. No patch is available currently...

CVE-2021-25741 affecting package kubernetes-1.21.1 1.21.1-7

CVE-2021-25741 affecting package kubernetes-1.21.1 1.21.1-7. No patch is available currently...

CVE-2021-25741 affecting package kubernetes-1.19.11 1.19.11-7

CVE-2021-25741 affecting package kubernetes-1.19.11 1.19.11-7. No patch is available currently...

CVE-2020-8563 affecting package kubernetes-1.18.14 1.18.14-8

CVE-2020-8563 affecting package kubernetes-1.18.14 1.18.14-8. No patch is available currently...

Updated opencontainers-runc packages fix security vulnerability

runc 1.1.13 and earlier as well as 1.2.0-rc2 and earlier can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by sharing a volume between two containers and exploiting a race with os.MkdirAll. While this can be used to create empty files, existing...

MGASA-2025-0004 Updated opencontainers-runc packages fix security vulnerability

runc 1.1.13 and earlier as well as 1.2.0-rc2 and earlier can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by sharing a volume between two containers and exploiting a race with os.MkdirAll. While this can be used to create empty files, existing...

GHSA-58MG-WW7Q-XW3P

creationtimestamp| type| source ---|---|--- 2025-01-08 20:22:12+00:00| seen| https://bsky.app/profile/Kubernetes.activitypub.awakari.com.ap.brid.gy/post/3lfayiptjt662...