VYPR
← All advisories
Moderate severityNVD Advisory· Published Jun 16, 2023· Updated Feb 13, 2025

Bypass of seccomp profile enforcement

CVE-2023-2431

Description

A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined (seccomp disabled) mode. This bug affects Kubelet.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
k8s.io/kubernetesGo
< 1.24.141.24.14
k8s.io/kubernetesGo
>= 1.25.0, < 1.25.101.25.10
k8s.io/kubernetesGo
>= 1.26.0, < 1.26.51.26.5
k8s.io/kubernetesGo
>= 1.27.0, < 1.27.21.27.2

Affected products

1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

14

News mentions

0

No linked articles in our index yet.