kubernetes1.23 (SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS package kubernetes1.23, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (7)

• CVE-2024-0793 — CVSS 7.7 (high): A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a…
• CVE-2026-33814 — CVSS 7.5 (high): When processing HTTP/2 SETTINGS frames, transport will enter an infinite loop of writing CONTINUATION frames if it receives a…
• CVE-2026-35469 — CVSS 6.5 (medium): spdystream is a Go library for multiplexing streams over SPDY connections. In versions 0.5.0 and below, the SPDY/3 frame parser does not…
• CVE-2025-22872 — CVSS 6.5 (medium): The tokenizer incorrectly interprets tags with unquoted attribute values that end with a solidus character (/) as self-closing. When…
• CVE-2023-2431 — CVSS 3.4 (low): A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for…
• CVE-2021-25743 — CVSS 3.0 (low): kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not…
• CVE-2024-3177 — CVSS 2.7 (low): A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy…