Go/k8s.io/kubernetes CVE-2022-3294: unknown, EPSS 1.62%
Kubernetes vulnerable to validation bypass in k8s.io/kubernetes
Action: Upgrade k8s.io/kubernetes to 1.22.16 or later.
go get k8s.io/kubernetes@v1.22.16go get k8s.io/kubernetes@v1.23.14go get k8s.io/kubernetes@v1.24.8go get k8s.io/kubernetes@v1.25.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.22.0 | 1.22.16 | - |
| 1.23.0 | 1.23.14 | - |
| 1.24.0 | 1.24.8 | - |
| 1.25.0 | 1.25.4 | - |
Fixed versions
| 1.22.16 | 1.23.14 | 1.24.8 | 1.25.4 |
Sources
- osv: GO-2023-1629
- https://github.com/advisories/GHSA-jh36-q97c-9928
- https://github.com/kubernetes/kubernetes/issues/113757
- https://groups.google.com/g/kubernetes-security-announce/c/VyPOxF7CIbA
- https://security.netapp.com/advisory/ntap-20230505-0007
CVE-2022-3294 · published · modified · JSON