~ / search / GHSA-q78c-gwqw-jcmc

GHSA-q78c-gwqw-jcmc

Kubernetes privilege escalation vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2023-3955

Packages

EcosystemPackageAffectedFixed in
Go k8s.io/kubernetes >= 1.28.0, < 1.28.1 1.28.1
Go k8s.io/kubernetes >= 1.27.0, < 1.27.5 1.27.5
Go k8s.io/kubernetes >= 1.26.0, < 1.26.8 1.26.8
Go k8s.io/kubernetes >= 1.25.0, < 1.25.13 1.25.13
Go k8s.io/kubernetes < 1.24.17 1.24.17

Details

As written in the advisory (Markdown source, shown as plain text).

A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes.

References

External links from the advisory. They lead to third-party sites.