GO-2024-2994
Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes
At a glance
- Published
- Updated
- CVE
- CVE-2024-5321
- Aliases
- GHSA-82m2-cv7p-4m75
Description
Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes
Affected packages
| Package | Versions |
|---|---|
| Go · k8s.io/kubernetes | introduced 0, fixed 1.27.16, introduced 1.28.0, fixed 1.28.12, introduced 1.29.0, fixed 1.29.7, introduced 1.30.0, fixed 1.30.3 |
References
- https://github.com/advisories/GHSA-82m2-cv7p-4m75 ADVISORY
- https://github.com/kubernetes/kubernetes/commit/23660a78ae462a6c8c75ac7ffd9af97550dda1aa WEB
- https://github.com/kubernetes/kubernetes/commit/84beb2915fa28ae477fe0676be8ba94ccd2b811a WEB
- https://github.com/kubernetes/kubernetes/commit/90589b8f63d28bcd3db89749950ebc48ed07c190 WEB
- https://github.com/kubernetes/kubernetes/commit/de2033033b1d202ecaaa79d41861a075df8b49c1 WEB
- https://github.com/kubernetes/kubernetes/issues/126161 WEB
- https://groups.google.com/g/kubernetes-security-announce/c/81c0BHkKNt0 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |