Most severe vulnerabilities for "cloud native computing foundation kubernetes"

Where

Sort:

Cloud Native Computing Foundation Kubernetes[kubernetes] CVE-2024-9042: Command Injection affecting Windows nodes via nodes/*/logs/query API

Risk 65

Severity

5.9

Exploited

Command Injection, Input Validation

AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N

A security vulnerability has been discovered in Kubernetes windows nodes that could allow a user with the ability to query a node's '/logs' endpoint to execute arbitrary commands on the host. This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.

1 / 2

Source: GitHub

First published (updated )

CVE-2024-9042

Cloud Native Computing Foundation KubernetesLow: Kubernetes in the Extras channel - deprecation notice

Risk 2

The kubernetes packages provide utilities for container cluster management.Kubernetes and its dependencies will no longer be updated through the Extras channel. Instead, the Red Hat customers are advised to use Red Hat's supported Kubernetes-based products such as Red Hat OpenShift Container Platform.Components impacted by this change include the following deprecated Kubernetes RPM packages, images, and associated documentation:RPM Packages: kubernetes kubernetes-devel kubernetes-client kubernetes-master kubernetes-node kubernetes-unit-test cadvisor Container Images: registry.access.redhat.com/rhel7/kubernetes-apiserver registry.access.redhat.com/rhel7/kubernetes-controller-mgr registry.access.redhat.com/rhel7/kubernetes-scheduler Documentation: The "Getting Started with Kubernetes" guide linked from the References section. Additional information and guidance are provided in the Red Hat Enterprise Linux Atomic Host 7.5 Release Notes linked from the References section.

Remedy

Red Hat OpenShift Container Platform will continue to provide Red Hat’s enterprise distribution of Kubernetes.

First published (updated )

Advisory

RHSA-2018:1072

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.