CVE-2024-9594
2 advisories.
Go/github.com/kubernetes-sigs/image-builder CVE-2024-9594: medium 6.3, EPSS 1.73%
VM images built with Image Builder with some providers use default credentials during builds in github.com/kubernetes-sigs/image-builder
Action: Upgrade github.com/kubernetes-sigs/image-builder to 0.1.38 or later.
go get github.com/kubernetes-sigs/image-builder@v0.1.38Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.38 | - |
Fixed versions
| 0.1.38 |
Sources
- osv: GHSA-8jpg-62jc-hwhr
- https://nvd.nist.gov/vuln/detail/CVE-2024-9594
- https://github.com/kubernetes/kubernetes/issues/128007
- https://github.com/kubernetes-sigs/image-builder/pull/1596
- https://groups.google.com/g/kubernetes-security-announce/c/UKJG-oZogfA/m/Lu1hcnHmAQAJ
CVE-2024-9594 · published · modified · JSON
Go/github.com/kubernetes-sigs/image-builder CVE-2024-9594: high 8.1, EPSS 1.73%
VM images built with Image Builder with some providers use default credentials during builds in github.com/kubernetes-sigs/image-builder
Action: Upgrade github.com/kubernetes-sigs/image-builder to 0.1.38 or later.
go get github.com/kubernetes-sigs/image-builder@v0.1.38Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.1.38 | - |
Fixed versions
| 0.1.38 |
Sources
- osv: GO-2024-3204
- nvd: CVE-2024-9594
- https://github.com/kubernetes/kubernetes/issues/128007
- https://github.com/kubernetes-sigs/image-builder/pull/1596
- https://groups.google.com/g/kubernetes-security-announce/c/UKJG-oZogfA/m/Lu1hcnHmAQAJ
CVE-2024-9594 · published · modified · JSON