CVE-2023-2431

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-2431
A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined (seccomp disabled) mode. This bug affects Kubelet.

5.5 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://github.com/kubernetes/kubernetes/issues/118690 Issue Tracking
https://github.com/kubernetes/kubernetes/issues/118690 Issue Tracking
https://github.com/kubernetes/kubernetes/issues/118690 Issue Tracking
https://groups.google.com/g/kubernetes-security-announce/c/QHmx0HOQa10 Mailing List
https://groups.google.com/g/kubernetes-security-announce/c/QHmx0HOQa10 Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/43HDSKBKPSW53OW647B5ETHRWFFNHSRQ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/43HDSKBKPSW53OW647B5ETHRWFFNHSRQ/
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XBX4RL4UOC7JHWWYB2AJCKSUM7EG5Y5G/ Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XBX4RL4UOC7JHWWYB2AJCKSUM7EG5Y5G/ Mailing List
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*
cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*
cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*
cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
History

12 Dec 2024, 16:15

Type Values Removed Values Added
References (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XBX4RL4UOC7JHWWYB2AJCKSUM7EG5Y5G/ - Mailing List () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XBX4RL4UOC7JHWWYB2AJCKSUM7EG5Y5G/ - Mailing List
References (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/43HDSKBKPSW53OW647B5ETHRWFFNHSRQ/ - () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/43HDSKBKPSW53OW647B5ETHRWFFNHSRQ/ -
References (MISC) https://github.com/kubernetes/kubernetes/issues/118690 - Issue Tracking () https://github.com/kubernetes/kubernetes/issues/118690 - Issue Tracking
References (MISC) https://groups.google.com/g/kubernetes-security-announce/c/QHmx0HOQa10 - Mailing List () https://groups.google.com/g/kubernetes-security-announce/c/QHmx0HOQa10 - Mailing List

01 Jul 2023, 06:15

Type Values Removed Values Added
References
  • (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/43HDSKBKPSW53OW647B5ETHRWFFNHSRQ/ -

30 Jun 2023, 16:37

Type Values Removed Values Added
CPE cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*
CWE NVD-CWE-Other
First Time Kubernetes
Fedoraproject fedora
Kubernetes kubernetes
Fedoraproject
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References (MISC) https://groups.google.com/g/kubernetes-security-announce/c/QHmx0HOQa10 - (MISC) https://groups.google.com/g/kubernetes-security-announce/c/QHmx0HOQa10 - Mailing List
References (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XBX4RL4UOC7JHWWYB2AJCKSUM7EG5Y5G/ - (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XBX4RL4UOC7JHWWYB2AJCKSUM7EG5Y5G/ - Mailing List
References (MISC) https://github.com/kubernetes/kubernetes/issues/118690 - (MISC) https://github.com/kubernetes/kubernetes/issues/118690 - Issue Tracking

27 Jun 2023, 13:15

Type Values Removed Values Added
References
  • (MISC) https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XBX4RL4UOC7JHWWYB2AJCKSUM7EG5Y5G/ -

16 Jun 2023, 08:15

Type Values Removed Values Added
New CVE
Information

Published : 2023-06-16 08:15

Updated : 2024-12-12 16:15

NVD link : CVE-2023-2431

Mitre link : CVE-2023-2431

JSON object : View

Products Affected

fedoraproject

  • fedora

kubernetes

  • kubernetes
CWE
NVD-CWE-Other