Are there public exploits for Kubernetes github.com/kubernetes/kubernetes vulnerabilities?

Yes — 1 of Kubernetes github.com/kubernetes/kubernetes's CVEs have a known public exploit.

Which versions of Kubernetes github.com/kubernetes/kubernetes are affected?

27 distinct Kubernetes github.com/kubernetes/kubernetes versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in Kubernetes github.com/kubernetes/kubernetes CVEs?

Kubernetes github.com/kubernetes/kubernetes's CVEs most often map to these CWE weakness types: CWE-532 (Insertion of Sensitive Information into Log File), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-20 (Improper Input Validation).

What is the average severity of Kubernetes github.com/kubernetes/kubernetes CVEs?

The average CVSS base score across Kubernetes github.com/kubernetes/kubernetes's scored CVEs is 6.9.

Kubernetes github.com/kubernetes/kubernetes Vulnerabilities

Name: Kubernetes github.com/kubernetes/kubernetes vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

Overview

Kubernetes github.com/kubernetes/kubernetes has 9 published CVE records since 2015, of which none are in CISA's KEV catalog and 1 has a known public exploit. The average CVSS base score across scored CVEs is 6.9.

Severity and exploitation

How the CVSS severity of Kubernetes github.com/kubernetes/kubernetes's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High2

Medium6

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Kubernetes github.com/kubernetes/kubernetes's CVEs are currently listed in CISA's KEV catalog.

Public exploits

One of Kubernetes github.com/kubernetes/kubernetes's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every Kubernetes github.com/kubernetes/kubernetes version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges12 most-used of 14

< 1.17.132 CVEs
1.18.0 <= v < 1.18.102 CVEs
1.19.0 <= v < 1.19.32 CVEs
1.22.0 <= v < 1.22.162 CVEs
1.23.0 <= v < 1.23.142 CVEs
1.24.0 <= v < 1.24.82 CVEs
1.25.0 <= v < 1.25.42 CVEs
< 1.1.11 CVE
< 1.10.111 CVE

Common weakness types

The CWE weakness categories most often found in Kubernetes github.com/kubernetes/kubernetes CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many Kubernetes github.com/kubernetes/kubernetes CVEs were published each year.

2015

2016

2017

2018

2019

2020

2021

Other Kubernetes products

Browse vulnerabilities for other products by Kubernetes.

Kubernetes78 CVEs ingress-nginx24 CVEs cri-o10 CVEs Kubelet7 CVEs Kubernetes ingress-nginx4 CVEs Image Builder3 CVEs kube-apiserver3 CVEs

Frequently asked questions

Common questions about Kubernetes github.com/kubernetes/kubernetes vulnerabilities.

How many CVEs does Kubernetes github.com/kubernetes/kubernetes have?: Kubernetes github.com/kubernetes/kubernetes has 9 published CVE records since 2015.
How many Kubernetes github.com/kubernetes/kubernetes CVEs are in CISA KEV?: None of Kubernetes github.com/kubernetes/kubernetes's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Kubernetes github.com/kubernetes/kubernetes vulnerabilities?: Yes — 1 of Kubernetes github.com/kubernetes/kubernetes's CVEs have a known public exploit.
Which versions of Kubernetes github.com/kubernetes/kubernetes are affected?: 27 distinct Kubernetes github.com/kubernetes/kubernetes versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Kubernetes github.com/kubernetes/kubernetes CVEs?: Kubernetes github.com/kubernetes/kubernetes's CVEs most often map to these CWE weakness types: CWE-532 (Insertion of Sensitive Information into Log File), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-20 (Improper Input Validation).
How many critical Kubernetes github.com/kubernetes/kubernetes vulnerabilities are there?: Kubernetes github.com/kubernetes/kubernetes has 1 critical and 2 high-severity CVEs.
What is the average severity of Kubernetes github.com/kubernetes/kubernetes CVEs?: The average CVSS base score across Kubernetes github.com/kubernetes/kubernetes's scored CVEs is 6.9.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track Kubernetes github.com/kubernetes/kubernetes vulnerabilities

Get an alert for each new Kubernetes github.com/kubernetes/kubernetes CVE, with AI-written analysis and remediation steps.

Create an account See pricing

Frequently asked questions

Common questions about Kubernetes github.com/kubernetes/kubernetes vulnerabilities.

How many CVEs does Kubernetes github.com/kubernetes/kubernetes have?: Kubernetes github.com/kubernetes/kubernetes has 9 published CVE records since 2015.
How many Kubernetes github.com/kubernetes/kubernetes CVEs are in CISA KEV?: None of Kubernetes github.com/kubernetes/kubernetes's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for Kubernetes github.com/kubernetes/kubernetes vulnerabilities?: Yes — 1 of Kubernetes github.com/kubernetes/kubernetes's CVEs have a known public exploit.
Which versions of Kubernetes github.com/kubernetes/kubernetes are affected?: 27 distinct Kubernetes github.com/kubernetes/kubernetes versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in Kubernetes github.com/kubernetes/kubernetes CVEs?: Kubernetes github.com/kubernetes/kubernetes's CVEs most often map to these CWE weakness types: CWE-532 (Insertion of Sensitive Information into Log File), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-20 (Improper Input Validation).
How many critical Kubernetes github.com/kubernetes/kubernetes vulnerabilities are there?: Kubernetes github.com/kubernetes/kubernetes has 1 critical and 2 high-severity CVEs.
What is the average severity of Kubernetes github.com/kubernetes/kubernetes CVEs?: The average CVSS base score across Kubernetes github.com/kubernetes/kubernetes's scored CVEs is 6.9.

Affected versions and CVEs

Browse every Kubernetes github.com/kubernetes/kubernetes version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges12 most-used of 14

< 1.17.132 CVEs
1.18.0 <= v < 1.18.102 CVEs
1.19.0 <= v < 1.19.32 CVEs
1.22.0 <= v < 1.22.162 CVEs
1.23.0 <= v < 1.23.142 CVEs
1.24.0 <= v < 1.24.82 CVEs
1.25.0 <= v < 1.25.42 CVEs
< 1.1.11 CVE
< 1.10.111 CVE

Find a version

9 CVEs

Sort

Node address isn't always verified when proxying
CVE-2022-3294
Patch
Workaround
CWE-20
High · CVSS 8.8
EPSS 1.6% (76th pct)2023-03-01
Unauthorized read of Custom Resources
CVE-2022-3162
Patch
CWE-23
Medium · CVSS 6.5
EPSS 1.4% (73th pct)2023-03-01
Secret leaks in logs for vSphere Provider kube-controller-manager
CVE-2020-8563
Patch
Workaround
CWE-532
Medium · CVSS 6.3
EPSS 0.5% (46th pct)2020-12-07
Docker config secrets leaked when file is malformed and loglevel >= 4
CVE-2020-8564
Patch
Workaround
CWE-532
Medium · CVSS 5.5
EPSS 0.5% (41th pct)2020-12-07
Ceph RBD adminSecrets exposed in logs when loglevel >= 4
CVE-2020-8566
Patch
Workaround
CWE-532
Medium · CVSS 5.5
EPSS 0.5% (45th pct)2020-12-07
Privilege Escalation in Kubernetes
CVE-2018-1002105
Public exploit
Patch
Workaround
CWE-388
Critical · CVSS 9.8
EPSS 87.0% (100th pct)2018-12-05
Information Exposure in Kubernetes
CVE-2015-7528
Patch
CWE-200
Medium · CVSS 5.3
EPSS 2.1% (82th pct)2016-04-11
Access Restriction Bypass in kubernetes
CVE-2016-1905
Patch
CWE-284
High · CVSS 7.7
EPSS 1.6% (76th pct)2016-02-03
Directory Traversal in Kubernetes
CVE-2015-5305
Patch
CWE-22
Medium · CVSS 6.5
EPSS 1.8% (79th pct)2015-11-06

Kubernetes github.com/kubernetes/kubernetes Vulnerabilities

Overview

Severity and exploitation

Affected versions and CVEs

Version ranges12 most-used of 14

Common weakness types

Disclosure activity by year

Other Kubernetes products

Frequently asked questions

References

Track Kubernetes github.com/kubernetes/kubernetes vulnerabilities

Frequently asked questions

Affected versions and CVEs

Version ranges12 most-used of 14

Fixed in12 most-used of 13