Log in Start free

Vulnerability · Published Jun 16, 2023 · Assigned by kubernetes

CVE-2023-2431Bypass of seccomp profile enforcement

Low 3.4

In plain English

A low-severity security flaw in Kubernetes from Kubernetes. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)3.4Low
Exploit odds (30 days)0.3%top 82.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known

Official description

A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined (seccomp disabled) mode. This bug affects Kubelet.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:12kubernetes1.20.5+really1.20.2-1DEBIAN-CVE-2023-2431
Debian:13kubernetes1.20.5+really1.20.2-1DEBIAN-CVE-2023-2431
Debian:14kubernetes1.20.5+really1.20.2-1DEBIAN-CVE-2023-2431
Gok8s.io/kubernetes1.27.2GHSA-xc8m-28vv-4pjc
Gok8s.io/kubernetes1.24.14, 1.25.10, 1.26.5, 1.27.2GO-2023-1864
Gok8s.io/kubernetes1.24.14GHSA-xc8m-28vv-4pjc
Gok8s.io/kubernetes1.25.10GHSA-xc8m-28vv-4pjc
Gok8s.io/kubernetes1.26.5GHSA-xc8m-28vv-4pjc
Ubuntu:22.04:LTSkubernetesno fix listedUBUNTU-CVE-2023-2431
Ubuntu:24.04:LTSkubernetesno fix listedUBUNTU-CVE-2023-2431

Affected products (as reported)

VendorProductVersions
Kubernetes Kubernetes 0 – before v1.24.14v1.25.0 – before v1.25.9v1.26.0 – before v1.26.4v1.27.0 – before v1.27.1

Weakness: CWE-1287 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

References