VYPR
← All advisories
High severityNVD Advisory· Published Oct 31, 2023· Updated Feb 13, 2025

Kubernetes - Windows nodes - Insufficient input sanitization leads to privilege escalation

CVE-2023-3955

Description

A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
k8s.io/kubernetesGo
>= 1.28.0, < 1.28.11.28.1
k8s.io/kubernetesGo
>= 1.27.0, < 1.27.51.27.5
k8s.io/kubernetesGo
>= 1.26.0, < 1.26.81.26.8
k8s.io/kubernetesGo
>= 1.25.0, < 1.25.131.25.13
k8s.io/kubernetesGo
< 1.24.171.24.17

Affected products

122

Patches

Vulnerability mechanics

References

17

News mentions

0

No linked articles in our index yet.