ALT-PU-2023-8031-4

Package update kubernetes1.25 in branch c10f2

Version1.25.16-alt1

Published2026-02-04

Max severityHIGH

Severity:

Closed issues (3)

HIGH7.2

Уязвимость утилиты kubelet программного средства управления кластерами виртуальных машин Kubernetes, позволяющая нарушителю повысить свои привилегии до уровня администратора

Published: 2023-11-17Modified: 2025-03-05

CVSS 3.xHIGH 7.2

CVSS:3.x/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS 2.0HIGH 8.3

CVSS:2.0/AV:N/AC:L/Au:M/C:C/I:C/A:C

References

CVE-2023-5528

HIGH8.8

A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree storage plugin for Windows nodes.

Published: 2023-11-14Modified: 2025-01-03

CVSS 3.xHIGH 8.8

CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

GHSA-hq6q-c2x6-hmch

HIGH8.8

Kubernetes Improper Input Validation vulnerability

Published: 2023-11-15Modified: 2024-09-06

CVSS 3.xHIGH 8.8

CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References