CVE-2023-2431
Bypass of seccomp profile enforcement
Résumé
Bypass of seccomp profile enforcement
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined (seccomp disabled) mode. This bug affects Kubelet.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2023-2431 kubernetes Corrigé dans: 1.20.5+really1.20.2-1
Références
- advisory github.com
- advisory nvd.nist.gov
- report github.com
- web github.com
- web groups.google.com
- web lists.fedoraproject.org
- web lists.fedoraproject.org