A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined (seccomp disabled) mode. This bug affects Kubelet.
References
Configurations
History
01 Jul 2023, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
30 Jun 2023, 16:37
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XBX4RL4UOC7JHWWYB2AJCKSUM7EG5Y5G/ - Mailing List | |
| References | (MISC) https://groups.google.com/g/kubernetes-security-announce/c/QHmx0HOQa10 - Mailing List | |
| References | (MISC) https://github.com/kubernetes/kubernetes/issues/118690 - Issue Tracking | |
| CWE | NVD-CWE-Other | |
| First Time |
Fedoraproject
Kubernetes kubernetes Kubernetes Fedoraproject fedora |
|
| CPE | cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.5 |
27 Jun 2023, 13:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
16 Jun 2023, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-06-16 08:15
Updated : 2024-02-28 20:13
NVD link : CVE-2023-2431
Mitre link : CVE-2023-2431
CVE.ORG link : CVE-2023-2431
JSON object : View
Products Affected
fedoraproject
- fedora
kubernetes
- kubernetes
CWE