kubernetes vulnerabilities (Azure Linux)
74 vulnerabilities.
kubernetesAzure LinuxGo JOSE's Parsing Vulnerable to Denial of Service6.6 MediumkubernetesAzure LinuxNode Denial of Service via kubelet Checkpoint API6.2 MediumkubernetesAzure LinuxNon-linear parsing of case-insensitive content in golang.org/x/net/html5.3 MediumkubernetesAzure LinuxArbitrary command execution through gitRepo volume8.1 HighkubernetesAzure LinuxBad documentation of error handling in ParseWithClaims can lead to potentially dangerous situations in golang-jwt3.1 LowkubernetesAzure Linuxrunc can be confused to create empty files/directories on the host3.6 LowkubernetesAzure LinuxIncorrect permissions on Windows containers logs6.1 MediumkubernetesAzure LinuxBypassing mountable secrets policy imposed by the ServiceAccount admission plugin2.7 LowkubernetesAzure LinuxHTTP/2 CONTINUATION flood in net/http7.5 HighkubernetesAzure LinuxGo JOSE vulnerable to Improper Handling of Highly Compressed Data (Data Amplification)4.3 MediumkubernetesAzure LinuxInfinite loop in JSON unmarshaling in google.golang.org/protobuf7.5 HighkubernetesAzure Linuxrunc container breakout through process.cwd trickery and leaked fds8.6 HighkubernetesAzure LinuxPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 MediumkubernetesAzure LinuxKubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege escalation7.2 HighkubernetesAzure LinuxOpenshift: modification of node role labels7.2 HighkubernetesAzure LinuxOpenTelemetry-Go Contrib has DoS vulnerability in otelhttp due to unbound cardinality metrics7.5 HighkubernetesAzure LinuxEclipse Jetty XmlParser allows arbitrary DOCTYPE declarations7.5 HighkubernetesAzure LinuxJenkins Kubernetes Plugin does not properly mask credentials7.5 HighkubernetesAzure LinuxUnauthorized read of Custom Resources6.5 MediumkubernetesAzure LinuxBypass of Kubernetes API Server proxy TOCTOU2.2 LowkubernetesAzure LinuxHoles in EndpointSlice Validation Enable Host Network Hijack3.1 LowkubernetesAzure LinuxWebhook redirect in kube-apiserver4.1 MediumkubernetesAzure LinuxKubernetes man in the middle using LoadBalancer or ExternalIPs6.3 MediumkubernetesAzure LinuxInvoking failure to reject ASCII-only Punycode-encoded labels in golang.org/x/net/idna9.6 Critical