Vérifiez votre version
kubelet --versionCVE affectant 1.5
| CVE | Titre | CVSS | Exploitée | EPSS | Publication |
|---|---|---|---|---|---|
| CVE-2017-1000056 | Kubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admission plug... | 9.8 | — | 2017-07-14 | |
| CVE-2018-1002105 | In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to p... | 9.8 | — | 2018-12-06 | |
| CVE-2017-1002101 | In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers usi... | 8.8 | — | 2018-03-14 | |
| CVE-2021-25741 | Symlink Exchange Can Allow Host Filesystem Access | 8.8 | — | 2021-09-21 | |
| CVE-2023-3676 | Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation | 8.8 | — | 2023-11-01 | |
| CVE-2023-3955 | Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation | 8.8 | — | 2023-11-01 | |
| CVE-2019-9946 | Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall mis... | 7.5 | — | 2019-04-03 | |
| CVE-2019-11253 | Kubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack | 7.5 | — | 2019-10-18 | |
| CVE-2017-1002102 | In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers usi... | 7.1 | — | 2018-03-14 | |
| CVE-2022-3294 | Node address isn't always verified when proxying | 6.6 | — | 2023-03-01 | |
| CVE-2019-1002100 | In all Kubernetes versions prior to v1.11.8, v1.12.6, and v1.13.4, users that are authorized to make patch req... | 6.5 | — | 2019-04-01 | |
| CVE-2019-11248 | Kubernetes kubelet exposes /debug/pprof info on healthz port | 6.5 | — | 2019-08-29 | |
| CVE-2019-11254 | Kubernetes API Server denial of service vulnerability from malicious YAML payloads | 6.5 | — | 2020-04-02 | |
| CVE-2021-25735 | Validating Admission Webhook does not observe some previous fields | 6.5 | — | 2021-09-06 | |
| CVE-2022-3162 | Unauthorized read of Custom Resources | 6.5 | — | 2023-03-01 | |
| CVE-2023-2727 | Bypassing policies imposed by the ImagePolicyWebhook admission plugin | 6.5 | — | 2023-07-04 | |
| CVE-2023-2728 | Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin | 6.5 | — | 2023-07-04 | |
| CVE-2019-11246 | kubectl cp allows symlink directory traversal | 6.4 | — | 2019-08-29 | |
| CVE-2020-8555 | Kubernetes kube-controller-manager SSRF | 6.3 | — | 2020-06-05 | |
| CVE-2019-11252 | Credential leakage when failing to mount | 5.9 | — | 2020-07-23 | |
| CVE-2020-8557 | Kubernetes node disk Denial of Service by writing to container /etc/hosts | 5.5 | — | 2020-07-24 | |
| CVE-2020-8558 | Kubernetes node setting allows for neighboring hosts to bypass localhost boundary | 5.4 | — | 2020-07-28 | |
| CVE-2020-8552 | Kubernetes API server denial of service | 5.3 | — | 2020-03-27 | |
| CVE-2019-11249 | kubectl cp allows symlink directory traversal | 4.8 | — | 2019-08-29 | |
| CVE-2019-11250 | Kubernetes client-go logs authorization headers at debug verbosity levels | 4.7 | — | 2019-08-29 | |
| CVE-2020-8563 | Secret leaks in logs for vSphere Provider kube-controller-manager | 4.7 | — | 2020-12-08 | |
| CVE-2018-1002100 | In Kubernetes versions 1.5.x, 1.6.x, 1.7.x, 1.8.x, and prior to version 1.9.6, the kubectl cp command insecure... | 4.2 | — | 2018-06-02 | |
| CVE-2023-2431 | Bypass of seccomp profile enforcement | 3.4 | — | 2023-06-16 | |
| CVE-2021-25743 | ANSI escape characters in kubectl output are not being filtered | 3.0 | — | 2022-01-07 | |
| CVE-2020-8562 | Bypass of Kubernetes API Server proxy TOCTOU | 2.2 | — | 2022-02-01 |
Suivez ces versions sur vos propres serveurs
InfraGuard collecte les versions logicielles installées sur chaque serveur et signale celles qui présentent des vulnérabilités connues. Auto-hébergé : rien ne quitte votre réseau.
Données : CVE List (CVE® Program), NVD, CISA KEV, FIRST EPSS (voir EPSS sur https://www.first.org/epss), endoflife.date. Liste des logiciels : awesome-selfhosted (CC BY-SA 3.0).