Fluid Attacks Database

Description

Kubernetes privilege escalation vulnerability A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
go	k8s.io/kubernetes/pkg/kubelet/server	>=0 <1.24.17 \|\| >=1.25.0 <1.25.13 \|\| >=1.26.0 <1.26.8 \|\| >=1.27.0 <1.27.5 \|\| >=1.28.0 <1.28.1	1.24.17, 1.25.13, 1.26.8, 1.27.5, 1.28.1
go	github.com/kubernetes/client-go	>=0 <1.24.17 \|\| >=1.25.0 <1.25.13 \|\| >=1.26.0 <1.26.8 \|\| >=1.27.0 <1.27.5 \|\| >=1.28.0 <1.28.1	1.24.17, 1.25.13, 1.26.8, 1.27.5, 1.28.1
go	k8s.io/kubernetes	=1.28.0 \|\| >=1.28.0 <1.28.1 \|\| >=1.27.0 <1.27.5 \|\| >=1.26.0 <1.26.8 \|\| >=1.25.0 <1.25.13 \|\| >=0 <1.24.17	1.28.1, 1.27.5, 1.26.8, 1.25.13, 1.24.17
debian 11	kubernetes	>=0 <1.20.5+really1.20.2-1	1.20.5+really1.20.2-1
debian 12	kubernetes	>=0 <1.20.5+really1.20.2-1	1.20.5+really1.20.2-1
debian 13	kubernetes	>=0 <1.20.5+really1.20.2-1	1.20.5+really1.20.2-1
debian 14	kubernetes	>=0 <1.20.5+really1.20.2-1	1.20.5+really1.20.2-1
go	github.com/kubernetes/kubernetes	>=0 <1.24.17 \|\| >=1.25.0 <1.25.13 \|\| >=1.26.0 <1.26.8 \|\| >=1.27.0 <1.27.5 \|\| >=1.28.0 <1.28.1	1.24.17, 1.25.13, 1.26.8, 1.27.5, 1.28.1
go	github.com/kubernetes/kubelet	>=0 <1.24.17 \|\| >=1.25.0 <1.25.13 \|\| >=1.26.0 <1.26.8 \|\| >=1.27.0 <1.27.5 \|\| >=1.28.0 <1.28.1	v1.24.17, v1.25.13, v1.26.8, v1.27.5, v1.28.1
go	github.com/kubernetes/kubernetes/pkg/kubectl/cmd/cp	>=0 <1.24.17 \|\| >=1.25.0 <1.25.13 \|\| >=1.26.0 <1.26.8 \|\| >=1.27.0 <1.27.5 \|\| >=1.28.0 <1.28.1	1.24.17, 1.25.13, 1.26.8, 1.27.5, 1.28.1

1-10 of 12

Aliases

1. CVE-2023-36762. NVD-2023-36763. OSV-2023-36764. OSV-DEBIAN-2023-36765. GCVE-2023-36766. SECURITY-TRACKER-CVE-2023-3676

References

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.