kubevirt.io/kubevirt vulnerabilities (Go)
20 vulnerabilities.
kubevirt.io/kubevirtGoKubevirt: virt-handler-rhel9: kubevirt: unbounded virtio-serial readline in virt-handler causes oom denial of service3.8 Lowkubevirt.io/kubevirtGoVirt-api-rhel9: kubevirt: kubevirt: ssrf in virt-api port-forward via unvalidated guest-agent-reported ip6.4 Mediumkubevirt.io/kubevirtGoKubevirt: kubevirt: symlink following in writetocachedfile allows host file overwrite from virt-launcher4.2 Mediumkubevirt.io/kubevirtGoKubevirt: kubevirt: vmexport directory symlink escape enables exporter pod file read7.7 Highkubevirt.io/kubevirtGoKubevirt: kubevirt virt-handler: privilege escalation and node compromise via symlink following vulnerability9.9 Criticalkubevirt.io/kubevirtGoKubevirt: kubevirt: unauthorized subresource access due to improper rbac evaluation5.4 Mediumkubevirt.io/kubevirtGoKubevirt: kubevirt: vm administration denial of service via guest agent6.4 Mediumkubevirt.io/kubevirtGoKubeVirt Vulnerable to Arbitrary Host File Read and Write8.5 Highkubevirt.io/kubevirtGoKubeVirt Isolation Detection Flaw Allows Arbitrary File Permission Changes5.0 Mediumkubevirt.io/kubevirtGoKubeVirt Excessive Role Permissions Could Enable Unauthorized VMI Migrations Between Nodes6.9 Mediumkubevirt.io/kubevirtGoKubeVirt VMI Denial-of-Service (DoS) Using Pod Impersonation5.3 Mediumkubevirt.io/kubevirtGoKubeVirt Improper TLS Certificate Management Handling Allows API Identity Spoofing4.7 Mediumkubevirt.io/kubevirtGoKubeVirt Arbitrary Container File Read6.5 Mediumkubevirt.io/kubevirtGoKubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer4.7 Mediumkubevirt.io/kubevirtGokubevirt allows a local attacker to execute arbitrary code via a crafted command5.9 Mediumkubevirt.io/kubevirtGoCnv: dos through repeatedly calling vm-dump-metrics until virt handler crashes6.5 Mediumkubevirt.io/kubevirtGoOn a compromised KubeVirt node, the virt-handler service account can be used to modify all node specs8.2 Highkubevirt.io/kubevirtGoPath Traversal vulnerability in Kubevirt8.7 Highkubevirt.io/kubevirtGoPermissions bypass in KubeVirt6.5 Mediumkubevirt.io/kubevirtGoPrivilege Escalation in kubevirt9.9 Critical