CVE-2022-46174

Go/github.com/kubernetes-sigs/aws-efs-csi-driver CVE-2022-46174: medium 4.2, EPSS 0.62%

efs-utils and aws-efs-csi-driver have race condition during concurrent TLS mounts

Action: Upgrade github.com/kubernetes-sigs/aws-efs-csi-driver to 1.4.8 or later.

go get github.com/kubernetes-sigs/aws-efs-csi-driver@v1.4.8

Affected

Fixed versions

Sources

• osv: GHSA-4fv8-w65m-3932
• https://github.com/aws/efs-utils/security/advisories/GHSA-4fv8-w65m-3932
• https://nvd.nist.gov/vuln/detail/CVE-2022-46174
• https://github.com/aws/efs-utils/issues/125
• https://github.com/aws/efs-utils/commit/f3a8f88167d55caa2f78aeb72d4dc1987a9ed62d
• https://github.com/aws/efs-utils

CVE-2022-46174 · published 2022-12-30T16:57:49Z · modified 2023-11-08T04:10:55.890554Z · JSON