CVE-2023-2431
Bypass of seccomp profile enforcement
概要
Bypass of seccomp profile enforcement
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined (seccomp disabled) mode. This bug affects Kubelet.
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
ディストリビューション別の修正状況
各ディストリビューションが公開している、この CVE の修正パッケージ
- Debian DEBIAN-CVE-2023-2431 kubernetes 修正版: 1.20.5+really1.20.2-1
参照URL
- advisory github.com
- advisory nvd.nist.gov
- report github.com
- web github.com
- web groups.google.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org