CVE-2024-10220
Arbitrary command execution through gitRepo volume
Summary
Arbitrary command execution through gitRepo volume
Original description
The description as published by the source.
The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0 through 1.29.6, from 1.30.0 through 1.30.2.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2024-10220 kubernetes Fixed in: 1.20.5+really1.20.2-1
References
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- report github.com
- web openwall.com
- web groups.google.com