CVE-2023-2431
Bypass of seccomp profile enforcement
Summary
Bypass of seccomp profile enforcement
Original description
The description as published by the source.
A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined (seccomp disabled) mode. This bug affects Kubelet.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-2431 kubernetes Fixed in: 1.20.5+really1.20.2-1
References
- advisory github.com
- advisory nvd.nist.gov
- report github.com
- web github.com
- web groups.google.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org