CVE-2023-2431
2 advisories.
Go/k8s.io/kubernetes CVE-2023-2431: medium 4.4, EPSS 0.26%
Kubelet vulnerable to bypass of seccomp profile enforcement
Action: Upgrade k8s.io/kubernetes to 1.24.14 or later.
go get k8s.io/kubernetes@v1.24.14go get k8s.io/kubernetes@v1.25.10go get k8s.io/kubernetes@v1.26.5go get k8s.io/kubernetes@v1.27.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.24.14 | - |
| 1.25.0 | 1.25.10 | - |
| 1.26.0 | 1.26.5 | - |
| 1.27.0 | 1.27.2 | - |
Fixed versions
| 1.24.14 | 1.25.10 | 1.26.5 | 1.27.2 |
Sources
- osv: GHSA-xc8m-28vv-4pjc
- https://nvd.nist.gov/vuln/detail/CVE-2023-2431
- https://github.com/kubernetes/kubernetes/issues/118690
- https://github.com/kubernetes/kubernetes/pull/117020
- https://github.com/kubernetes/kubernetes/pull/117116
- https://github.com/kubernetes/kubernetes/pull/117117
- https://github.com/kubernetes/kubernetes/pull/117118
- https://github.com/kubernetes/kubernetes/pull/117147
- https://github.com/kubernetes/kubernetes
- https://groups.google.com/g/kubernetes-security-announce/c/QHmx0HOQa10
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/43HDSKBKPSW53OW647B5ETHRWFFNHSRQ
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XBX4RL4UOC7JHWWYB2AJCKSUM7EG5Y5G
- https://pkg.go.dev/vuln/GO-2023-1864
CVE-2023-2431 · published · modified · JSON
Go/k8s.io/kubernetes CVE-2023-2431: unknown, EPSS 0.26%
Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes
Action: Upgrade k8s.io/kubernetes to 1.24.14 or later.
go get k8s.io/kubernetes@v1.24.14go get k8s.io/kubernetes@v1.25.10go get k8s.io/kubernetes@v1.26.5go get k8s.io/kubernetes@v1.27.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.24.14 | - |
| 1.25.0 | 1.25.10 | - |
| 1.26.0 | 1.26.5 | - |
| 1.27.0 | 1.27.2 | - |
Fixed versions
| 1.24.14 | 1.25.10 | 1.26.5 | 1.27.2 |
Sources
- osv: GO-2023-1864
- https://github.com/advisories/GHSA-xc8m-28vv-4pjc
- https://github.com/kubernetes/kubernetes/issues/118690
- https://github.com/kubernetes/kubernetes/pull/117020
- https://github.com/kubernetes/kubernetes/pull/117116
- https://github.com/kubernetes/kubernetes/pull/117117
- https://github.com/kubernetes/kubernetes/pull/117118
- https://github.com/kubernetes/kubernetes/pull/117147
- https://groups.google.com/g/kubernetes-security-announce/c/QHmx0HOQa10
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/43HDSKBKPSW53OW647B5ETHRWFFNHSRQ
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XBX4RL4UOC7JHWWYB2AJCKSUM7EG5Y5G
CVE-2023-2431 · published · modified · JSON