CVE-2022-3294
2 advisories.
Go/github.com/kubernetes/kubernetes CVE-2022-3294: high 8.8
Kubernetes vulnerable to validation bypass
Action: Upgrade github.com/kubernetes/kubernetes to 1.22.16 or later.
go get github.com/kubernetes/kubernetes@v1.25.4go get github.com/kubernetes/kubernetes@v1.24.8go get github.com/kubernetes/kubernetes@v1.23.14go get github.com/kubernetes/kubernetes@v1.22.16Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.25.0 | 1.25.4 | - |
| 1.24.0 | 1.24.8 | - |
| 1.23.0 | 1.23.14 | - |
| 1.22.0 | 1.22.16 | - |
Fixed versions
| 1.25.4 | 1.24.8 | 1.23.14 | 1.22.16 |
Sources
- osv: GHSA-jh36-q97c-9928
- https://nvd.nist.gov/vuln/detail/CVE-2022-3294
- https://github.com/kubernetes/kubernetes/issues/113757
- https://github.com/kubernetes/kubernetes
- https://groups.google.com/g/kubernetes-security-announce/c/VyPOxF7CIbA
- https://security.netapp.com/advisory/ntap-20230505-0007
CVE-2022-3294 · published · modified · JSON
Go/k8s.io/kubernetes CVE-2022-3294: unknown
Kubernetes vulnerable to validation bypass in k8s.io/kubernetes
Action: Upgrade k8s.io/kubernetes to 1.22.16 or later.
go get k8s.io/kubernetes@v1.22.16go get k8s.io/kubernetes@v1.23.14go get k8s.io/kubernetes@v1.24.8go get k8s.io/kubernetes@v1.25.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.22.0 | 1.22.16 | - |
| 1.23.0 | 1.23.14 | - |
| 1.24.0 | 1.24.8 | - |
| 1.25.0 | 1.25.4 | - |
Fixed versions
| 1.22.16 | 1.23.14 | 1.24.8 | 1.25.4 |
Sources
- osv: GO-2023-1629
- https://github.com/advisories/GHSA-jh36-q97c-9928
- https://github.com/kubernetes/kubernetes/issues/113757
- https://groups.google.com/g/kubernetes-security-announce/c/VyPOxF7CIbA
- https://security.netapp.com/advisory/ntap-20230505-0007
CVE-2022-3294 · published · modified · JSON