Corregido en
Comprueba tu versión
kubelet --versionCVE que afectan a 1.20
| CVE | Título | CVSS | Explotada | EPSS | Publicación |
|---|---|---|---|---|---|
| CVE-2021-25741 | Symlink Exchange Can Allow Host Filesystem Access | 8.8 | — | 2021-09-21 | |
| CVE-2023-3676 | Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation | 8.8 | — | 2023-11-01 | |
| CVE-2023-3955 | Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation | 8.8 | — | 2023-11-01 | |
| CVE-2021-25749 | runAsNonRoot logic bypass for Windows containers | 7.8 | — | 2023-05-24 | |
| CVE-2023-5528 | Kubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege esca... | 7.2 | — | 2023-11-15 | |
| CVE-2022-3294 | Node address isn't always verified when proxying | 6.6 | — | 2023-03-01 | |
| CVE-2021-25735 | Validating Admission Webhook does not observe some previous fields | 6.5 | — | 2021-09-06 | |
| CVE-2022-3162 | Unauthorized read of Custom Resources | 6.5 | — | 2023-03-01 | |
| CVE-2023-2727 | Bypassing policies imposed by the ImagePolicyWebhook admission plugin | 6.5 | — | 2023-07-04 | |
| CVE-2023-2728 | Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin | 6.5 | — | 2023-07-04 | |
| CVE-2021-25736 | Windows kube-proxy LoadBalancer contention | 5.8 | — | 2023-10-30 | |
| CVE-2020-8561 | Webhook redirect in kube-apiserver | 4.1 | — | 2021-09-21 | |
| CVE-2023-2431 | Bypass of seccomp profile enforcement | 3.4 | — | 2023-06-16 | |
| CVE-2021-25743 | ANSI escape characters in kubectl output are not being filtered | 3.0 | — | 2022-01-07 | |
| CVE-2021-25737 | Holes in EndpointSlice Validation Enable Host Network Hijack | 2.7 | — | 2021-09-06 | |
| CVE-2020-8562 | Bypass of Kubernetes API Server proxy TOCTOU | 2.2 | — | 2022-02-01 |
Controla estas versiones en tus propios servidores
InfraGuard recopila las versiones de software instaladas en cada servidor y señala las que tienen vulnerabilidades conocidas. Autoalojado: nada sale de tu red.
Datos: CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (consulta EPSS en https://www.first.org/epss), endoflife.date. Lista de software: awesome-selfhosted (CC BY-SA 3.0).