Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2023-3676

Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
kubernetes

Description

A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kubernetes kubelet

Default version status: unaffected

  • v1.28.0affected
  • v1.27.0 to ≤ v1.27.4affected
  • v1.26.0 to ≤ v1.26.7affected
  • v1.25.0 to ≤ v1.25.12affected
  • v1.28.1unaffected
  • v1.27.5unaffected
  • v1.26.8unaffected
  • v1.25.13unaffected
  • v1.24.17unaffected
  • 0 to ≤ v1.24.16affected

References