kubernetes vulnerabilities (Debian)
50 vulnerabilities.
-
kubernetesDebian StatefulSet and ControllerRevision write permissions allow cross-namespace pod creation 5.9 Medium -
kubernetesDebian Portworx Half-Blind SSRF in kube-controller-manager 5.8 Medium -
kubernetesDebian Nodes can delete themselves by adding an OwnerReference 6.7 Medium -
kubernetesDebian Nodes can bypass dynamic resource allocation authorization checks 2.7 Low -
kubernetesDebian Network restriction bypass via race condition during namespace termination 3.1 Low -
kubernetesDebian Kubernetes GitRepo Volume Inadvertent Local Repository Access 6.5 Medium -
kubernetesDebian Node Denial of Service via kubelet Checkpoint API 6.2 Medium -
kubernetesDebian Arbitrary command execution through gitRepo volume 8.1 High -
kubernetesDebian Bypassing mountable secrets policy imposed by the ServiceAccount admission plugin 2.7 Low -
kubernetesDebian Kubernetes - csi-proxy - Insufficient input sanitization leads to privilege escalation 8.8 High -
kubernetesDebian Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation 8.8 High -
kubernetesDebian Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation 8.8 High -
kubernetesDebian Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin 6.5 Medium -
kubernetesDebian Bypassing policies imposed by the ImagePolicyWebhook admission plugin 6.5 Medium -
kubernetesDebian Bypass of seccomp profile enforcement 3.4 Low -
kubernetesDebian Node address isn't always verified when proxying 6.6 Medium -
kubernetesDebian Unauthorized read of Custom Resources 6.5 Medium -
kubernetesDebian Kubernetes - API server - Aggregated API server can cause clients to be redirected (SSRF) 5.1 Medium -
kubernetesDebian Bypass of Kubernetes API Server proxy TOCTOU 2.2 Low -
kubernetesDebian ANSI escape characters in kubectl output are not being filtered 3.0 Low -
kubernetesDebian Symlink Exchange Can Allow Host Filesystem Access 8.8 High -
kubernetesDebian Holes in EndpointSlice Validation Enable Host Network Hijack 3.1 Low -
kubernetesDebian Webhook redirect in kube-apiserver 4.1 Medium -
kubernetesDebian Holes in EndpointSlice Validation Enable Host Network Hijack 2.7 Low -
kubernetesDebian Validating Admission Webhook does not observe some previous fields 6.5 Medium -
kubernetesDebian Kubernetes man in the middle using LoadBalancer or ExternalIPs 6.3 Medium -
kubernetesDebian Docker config secrets leaked when file is malformed and loglevel >= 4 4.7 Medium -
kubernetesDebian Incomplete fix for CVE-2019-11250 allows for token leak in logs when logLevel >= 9 4.7 Medium -
kubernetesDebian Ceph RBD adminSecrets exposed in logs when loglevel >= 4 4.7 Medium -
kubernetesDebian Kubernetes node setting allows for neighboring hosts to bypass localhost boundary 5.4 Medium -
kubernetesDebian Kubernetes node disk Denial of Service by writing to container /etc/hosts 5.5 Medium -
kubernetesDebian Credential leakage when failing to mount 5.9 Medium -
kubernetesDebian Privilege escalation from compromised node to cluster 6.4 Medium -
kubernetesDebian Kubernetes kube-controller-manager SSRF 6.3 Medium -
kubernetesDebian Kubernetes API Server denial of service vulnerability from malicious YAML payloads 6.5 Medium -
kubernetesDebian Kubernetes API server denial of service 5.3 Medium -
kubernetesDebian Kubernetes kubelet denial of service 4.3 Medium -
kubernetesDebian Kubernetes API server follows unvalidated redirects from streaming Kubelet endpoints 2.6 Low -
kubernetesDebian Kubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack 7.5 High -
kubernetesDebian Kubernetes client-go logs authorization headers at debug verbosity levels 4.7 Medium -
kubernetesDebian Kubernetes kubelet exposes /debug/pprof info on healthz port 6.5 Medium -
kubernetesDebian Kubernetes kube-apiserver allows access to custom resources via wrong scope 5.0 Medium -
kubernetesDebian Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network... 7.5 High -
kubernetesDebian Kubernetes DoS Vulnerability 6.5 Medium -
kubernetesDebian Privilege Escalation in Kubernetes 9.8 Critical -
kubernetesDebian It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509... 7.5 High -
kubernetesDebian Kubernetes arbitrary file overwrite 4.2 Medium -
kubernetesDebian Kubernetes arbitrary file overwrite 7.1 High -
kubernetesDebian In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4... 8.8 High -
kubernetesDebian Kubernetes Privilege Escalation 9.8 Critical