Vulnerability CVE-2023-5528: Information

Description

A security issue was discovered in Kubernetes where a user that can create pods and persistent volumes on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they are using an in-tree storage plugin for Windows nodes.

Severity: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2023-5528
Published: Nov. 15, 2023
Modified: Jan. 3, 2025

Fixed packages

Package name
Branch
Fixed in version
Version from repository
Errata ID
Task #
State
kubernetes1.25sisyphus1.25.16-alt11.25.16-alt1ALT-PU-2023-7744-2335528Fixed
kubernetes1.25p101.25.16-alt11.25.16-alt1ALT-PU-2023-7744-2335528Fixed
kubernetes1.25c10f21.25.16-alt11.25.16-alt1ALT-PU-2023-8031-3336393Fixed
kubernetes1.25c9f21.25.16-alt11.25.16-alt1ALT-PU-2024-8233-3348709Fixed
kubernetes1.25p111.25.16-alt11.25.16-alt1ALT-PU-2023-7744-2335528Fixed
kubernetes1.26sisyphus1.26.11-alt11.26.15-alt1ALT-PU-2023-7745-2335528Fixed
kubernetes1.26p101.26.11-alt11.26.15-alt1ALT-PU-2023-7745-2335528Fixed
kubernetes1.26c10f21.26.11-alt11.26.15-alt1ALT-PU-2023-8032-3336393Fixed
kubernetes1.26c9f21.26.14-alt11.26.14-alt1ALT-PU-2024-8235-3348709Fixed
kubernetes1.26p111.26.11-alt11.26.15-alt1ALT-PU-2023-7745-2335528Fixed

References to Advisories, Solutions, and Tools

Hyperlink
Resource
https://github.com/kubernetes/kubernetes/issues/121879
  • Issue Tracking
  • Patch
https://github.com/kubernetes/kubernetes/issues/121879
  • Issue Tracking
  • Patch
https://groups.google.com/g/kubernetes-security-announce/c/SL_d4NR8pzA
  • Mailing List
https://groups.google.com/g/kubernetes-security-announce/c/SL_d4NR8pzA
  • Mailing List
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3JH444PWZBINXLLFV7XLIJIZJHSK6UEZ/
  • Patch
  • Release Notes
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4XZIX727JIKF5RQW7RVVBLWXBCDIBJA7/
  • Patch
  • Release Notes
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7MPGMITSZXUCAVO7Q75675SOLXC2XXU4/
  • Patch
  • Release Notes
https://security.netapp.com/advisory/ntap-20240119-0009/
  • Third Party Advisory

    1. Configuration 1

      cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*
      cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*
      cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*
      cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*
      Running on/with:
      cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

      Configuration 2

      cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
      cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
      cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
VKontakte|Telegram|YouTube|Forum|GitHub|Bugzilla
Version: v25.2.1
Back to top