修复版本
检查您的版本
kubelet --version影响 1.25 的 CVE
| CVE | 标题 | CVSS | 被利用 | EPSS | 发布日期 |
|---|---|---|---|---|---|
| CVE-2023-3676 | Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation | 8.8 | — | 2023-11-01 | |
| CVE-2023-3955 | Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation | 8.8 | — | 2023-11-01 | |
| CVE-2023-5528 | Kubernetes - Windows nodes - Insufficient input sanitization in in-tree storage plugin leads to privilege esca... | 7.2 | — | 2023-11-15 | |
| CVE-2022-3294 | Node address isn't always verified when proxying | 6.6 | — | 2023-03-01 | |
| CVE-2022-3162 | Unauthorized read of Custom Resources | 6.5 | — | 2023-03-01 | |
| CVE-2023-2727 | Bypassing policies imposed by the ImagePolicyWebhook admission plugin | 6.5 | — | 2023-07-04 | |
| CVE-2023-2728 | Bypassing enforce mountable secrets policy imposed by the ServiceAccount admission plugin | 6.5 | — | 2023-07-04 | |
| CVE-2023-2431 | Bypass of seccomp profile enforcement | 3.4 | — | 2023-06-16 | |
| CVE-2021-25743 | ANSI escape characters in kubectl output are not being filtered | 3.0 | — | 2022-01-07 |
数据来源：CVE List（CVE® Program）、NVD、CISA KEV、FIRST EPSS（EPSS 详见 https://www.first.org/epss）、endoflife.date。软件列表：awesome-selfhosted（CC BY-SA 3.0）。