kubernetes1.23 (SUSE:Linux Enterprise Module for Containers 15 SP5) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Containers 15 SP5 package kubernetes1.23, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (6)

• CVE-2024-0793 — CVSS 7.7 (high): A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a…
• CVE-2023-2727 — CVSS 6.5 (medium): Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes…
• CVE-2023-2728 — CVSS 6.5 (medium): Users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using…
• CVE-2023-2431 — CVSS 3.4 (low): A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for…
• CVE-2021-25743 — CVSS 3.0 (low): kubectl does not neutralize escape, meta or control sequences contained in the raw data it outputs to a terminal. This includes but is not…
• CVE-2024-3177 — CVSS 2.7 (low): A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy…