Kubernetes Security Issues (CVE-2023-3676, CVE-2023-3893, CVE-2023-3955)

25 de agosto de 2023

Hemos recibido recientemente del CCN-CERT, la siguiente noticia:

Publication Date: 2023/08/23 10:00 AM PDT AWS is aware of three security issues (CVE-2023-3676, CVE-2023-3893, CVE-2023-3955) in Kubernetes that affect Amazon EKS customers with Windows EC2 nodes in their clusters. These issues do not affect any Kubernetes control plane or the service itself, nor do these issues permit cross-customer impact. Updated Amazon EKS Windows AMIs are now available for Kubernetes versions 1.23 through 1.27 that include patched builds of kubelet and csi-proxy. We

More info:

https://aws.amazon.com/security/security-bulletins/AWS-2023-008/

Encontrarás más información a continuación:

http://www.ccn-cert.cni.es/component/vulnerabilidades/view/34610.html