Browse CVEs

HIGH 8.1 CVE-2024-5154 A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw… Cri O Mitigation only Fix from $1,9502024-06-12 HIGH 7.8 CVE-2022-4318 A vulnerability was found in cri-o. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment vari… Cri O Mitigation only Fix from $1,9502023-09-25 HIGH 8.0 CVE-2023-1260 An authentication bypass vulnerability was discovered in kube-apiserver. This issue could allow a remote, authenticated attacker who has been given p… Kube Apiserver Mitigation only Fix from $1,9502023-09-24 MEDIUM 5.3 CVE-2022-3466 The version of cri-o as released for Red Hat OpenShift Container Platform 4.9.48, 4.10.31, and 4.11.6 via RHBA-2022:6316, RHBA-2022:6257, and RHBA-20… Cri O Mitigation only Fix from $1,6002023-09-15 CRITICAL 9.8 CVE-2023-1174 This vulnerability exposes a network port in minikube running on macOS with Docker driver that could enable unexpected remote access to the minikube … Minikube Mitigation only Fix from $2,3002023-05-24 MEDIUM 6.5 CVE-2019-10223 A security issue was discovered in the kube-state-metrics versions v1.7.0 and v1.7.1. An experimental feature was added to the v1.7.0 release that en… Kube State Metrics No fix yet Fix from $1,6002019-11-05 CRITICAL 9.8 CVE-2017-1000056 Kubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admission plugin resulting in the ability to make use… Kubernetes Mitigation only Fix from $2,3002017-07-17 HIGH 7.7 CVE-2016-1905 The API server in Kubernetes does not properly check admission control, which allows remote authenticated users to access additional resources via a … Kubernetes Mitigation only Fix from $1,9502016-02-03