kubernetes1.23 (SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS package kubernetes1.23, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (10)

CVE-2021-25749 — CVSS 7.8 (high): Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true.
CVE-2024-0793 — CVSS 7.7 (high): A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a…
CVE-2022-3294 — CVSS 6.6 (medium): Users may have access to secure endpoints in the control plane network. Kubernetes clusters are only affected if an untrusted user can…
CVE-2023-2728 — CVSS 6.5 (medium): Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using…
CVE-2025-22872 — CVSS 6.5 (medium): The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When…
CVE-2022-3162 — CVSS 6.5 (medium): Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a different type in the…
CVE-2023-2727 — CVSS 6.5 (medium): Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes…
CVE-2023-2431 — CVSS 3.4 (low): A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for…
CVE-2021-25743 — CVSS 3.0 (low): kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not…
CVE-2024-3177 — CVSS 2.7 (low): A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy…