DirectorySecurity Advisories
Sign In
Security Advisories

CGA-9jrg-7hv4-xf3q

Published

Last updated

https://images.chainguard.dev/security/CGA-9jrg-7hv4-xf3q
Package

kubernetes-dns-node-cache-1.17

Latest Update
Not affected
Aliases
  • CVE-2023-2431
  • GHSA-xc8m-28vv-4pjc

Severity

4.4

Medium

CVSS V3

Summary

Kubelet vulnerable to bypass of seccomp profile enforcement

Description

A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined (seccomp disabled) mode. This bug affects Kubelet.

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images