CVE-2023-2727

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-2727
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-2727.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-2727
Aliases
Related
Published
2023-07-03T21:15:09Z
Modified
2024-09-18T01:00:22Z
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
[none]
Details

Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.

References

Affected packages

Debian:11 / kubernetes

Package

Name
kubernetes
Purl
pkg:deb/debian/kubernetes?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.5+really1.20.2-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / kubernetes

Package

Name
kubernetes
Purl
pkg:deb/debian/kubernetes?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.5+really1.20.2-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / kubernetes

Package

Name
kubernetes
Purl
pkg:deb/debian/kubernetes?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.5+really1.20.2-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/kubernetes/kubelet

Affected ranges

Type
GIT
Repo
https://github.com/kubernetes/kubelet
Events
Introduced
bc4c2f36af4e19e04b0d09b6fe4d101916a504fb
Last affected
718179a9d8ea0b27723e4a2ef4c6d18347c0a919
Last affected
e222ce84c343045e6a50a93a3a71b4d94c72e141
Introduced
202e223fff3b2425eb941c13ff02e10b8e11a568
Last affected
f516e7be6d15d5e9d21d166435a74c996fbb84c7
Introduced
d37f045d808033445aaa284ad80454c948b37958
Last affected
fdaba096539e39e41984eed38de069976b9b07a7