CVE-2024-9486
2 advisories.
Go/github.com/kubernetes-sigs/image-builder CVE-2024-9486: critical 9.8, EPSS 2.21%
VM images built with Image Builder and Proxmox provider use default credentials in github.com/kubernetes-sigs/image-builder
Action: Upgrade github.com/kubernetes-sigs/image-builder to 0.1.38 or later.
go get github.com/kubernetes-sigs/image-builder@v0.1.38Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.38 | - |
Fixed versions
| 0.1.38 |
Sources
- osv: GHSA-9224-ggvw-wh7v
- https://nvd.nist.gov/vuln/detail/CVE-2024-9486
- https://github.com/kubernetes/kubernetes/issues/128006
- https://github.com/kubernetes-sigs/image-builder/pull/1595
- https://github.com/kubernetes-sigs/image-builder
- https://groups.google.com/g/kubernetes-security-announce/c/UKJG-oZogfA/m/Lu1hcnHmAQAJ
CVE-2024-9486 · published · modified · JSON
Go/github.com/kubernetes-sigs/image-builder CVE-2024-9486: critical 9.8, EPSS 2.21%
VM images built with Image Builder and Proxmox provider use default credentials in github.com/kubernetes-sigs/image-builder
Action: Upgrade github.com/kubernetes-sigs/image-builder to 0.1.38 or later.
go get github.com/kubernetes-sigs/image-builder@v0.1.38Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.38 | - |
Fixed versions
| 0.1.38 |
Sources
- osv: GO-2024-3203
- nvd: CVE-2024-9486
- https://github.com/kubernetes/kubernetes/issues/128006
- https://github.com/kubernetes-sigs/image-builder/pull/1595
- https://groups.google.com/g/kubernetes-security-announce/c/UKJG-oZogfA/m/Lu1hcnHmAQAJ
CVE-2024-9486 · published · modified · JSON