Go/github.com/kubernetes/kubernetes CVE-2022-3294: high 8.8, EPSS 1.62%
Kubernetes vulnerable to validation bypass
Action: Upgrade github.com/kubernetes/kubernetes to 1.22.16 or later.
go get github.com/kubernetes/kubernetes@v1.25.4go get github.com/kubernetes/kubernetes@v1.24.8go get github.com/kubernetes/kubernetes@v1.23.14go get github.com/kubernetes/kubernetes@v1.22.16Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.25.0 | 1.25.4 | - |
| 1.24.0 | 1.24.8 | - |
| 1.23.0 | 1.23.14 | - |
| 1.22.0 | 1.22.16 | - |
Fixed versions
| 1.25.4 | 1.24.8 | 1.23.14 | 1.22.16 |
Sources
- osv: GHSA-jh36-q97c-9928
- https://nvd.nist.gov/vuln/detail/CVE-2022-3294
- https://github.com/kubernetes/kubernetes/issues/113757
- https://github.com/kubernetes/kubernetes
- https://groups.google.com/g/kubernetes-security-announce/c/VyPOxF7CIbA
- https://security.netapp.com/advisory/ntap-20230505-0007
CVE-2022-3294 · published · modified · JSON