Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2024-10220

Arbitrary command execution through gitRepo volume

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
kubernetes

Description

The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0 through 1.29.6, from 1.30.0 through 1.30.2.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kubernetes kubelet

Default version status: unaffected

  • 0 to ≤ 1.28.11affected
  • 1.29.0 to ≤ 1.29.6affected
  • 1.30.0 to ≤ 1.30.2affected
  • 1.31.0unaffected
  • 1.30.3unaffected
  • 1.29.7unaffected
  • 1.28.12unaffected

References