CVE-2024-9042
2 advisories.
Go/k8s.io/kubernetes CVE-2024-9042: medium 5.9
Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API
Action: Upgrade k8s.io/kubernetes to 1.29.13 or later.
go get k8s.io/kubernetes@v1.29.13go get k8s.io/kubernetes@v1.30.9go get k8s.io/kubernetes@v1.31.5go get k8s.io/kubernetes@v1.32.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.29.13 | - |
| 1.30.0-alpha.0 | 1.30.9 | - |
| 1.31.0-alpha.0 | 1.31.5 | - |
| 1.32.0-alpha.0 | 1.32.1 | - |
Fixed versions
| 1.29.13 | 1.30.9 | 1.31.5 | 1.32.1 |
Sources
- osv: GHSA-vv39-3w5q-974q
- https://nvd.nist.gov/vuln/detail/CVE-2024-9042
- https://github.com/kubernetes/kubernetes/issues/129654
- https://github.com/kubernetes/kubernetes/commit/45f4ccc2153bbb782253704cbe24c05e22b5d60c
- https://github.com/kubernetes/kubernetes/commit/5fe148234f8ab1184f26069c4f7bef6c37efe347
- https://github.com/kubernetes/kubernetes/commit/75c83a6871dc030675288c6d63c275a43c2f0d55
- https://github.com/kubernetes/kubernetes/commit/fb0187c2bf7061258bb89891edb1237261eb7abc
- https://github.com/kubernetes/kubernetes
- https://groups.google.com/g/kubernetes-security-announce/c/9C3vn6aCSVg
- http://www.openwall.com/lists/oss-security/2025/01/16/1
CVE-2024-9042 · published · modified · JSON
Go/k8s.io/kubernetes CVE-2024-9042: medium 5.9
Kubernetes allows Command Injection affecting Windows nodes via nodes/*/logs/query API in k8s.io/kubernetes
Action: Upgrade k8s.io/kubernetes to 1.29.13 or later.
go get k8s.io/kubernetes@v1.29.13go get k8s.io/kubernetes@v1.30.9go get k8s.io/kubernetes@v1.31.5go get k8s.io/kubernetes@v1.32.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.29.13 | - |
| 1.30.0-alpha.0 | 1.30.9 | - |
| 1.31.0-alpha.0 | 1.31.5 | - |
| 1.32.0-alpha.0 | 1.32.1 | - |
Fixed versions
| 1.29.13 | 1.30.9 | 1.31.5 | 1.32.1 |
Sources
- osv: GO-2025-3522
- nvd: CVE-2024-9042
- https://github.com/advisories/GHSA-vv39-3w5q-974q
- http://www.openwall.com/lists/oss-security/2025/01/16/1
- https://github.com/kubernetes/kubernetes/commit/45f4ccc2153bbb782253704cbe24c05e22b5d60c
- https://github.com/kubernetes/kubernetes/commit/5fe148234f8ab1184f26069c4f7bef6c37efe347
- https://github.com/kubernetes/kubernetes/commit/75c83a6871dc030675288c6d63c275a43c2f0d55
- https://github.com/kubernetes/kubernetes/commit/fb0187c2bf7061258bb89891edb1237261eb7abc
- https://github.com/kubernetes/kubernetes/issues/129654
- https://groups.google.com/g/kubernetes-security-announce/c/9C3vn6aCSVg
CVE-2024-9042 · published · modified · JSON