--- title: "Kubernetes github.com/kubernetes/kubernetes vulnerabilities and CVEs" url: https://radicalnotion.ai/vendor/kubernetes/github-com-kubernetes-kubernetes type: product description: "Kubernetes github.com/kubernetes/kubernetes has 9 published CVEs, 0 in CISA KEV and 1 with public exploits." updated: 2023-03-01 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # Kubernetes github.com/kubernetes/kubernetes vulnerabilities Vendor: [Kubernetes](https://radicalnotion.ai/vendor/kubernetes) - **Published CVEs:** 9 - **In CISA KEV:** 0 - **With a public exploit:** 1 - **With a patch:** 9 - **Average CVSS:** 6.9 - **First CVE:** 2015-11-06 - **Latest CVE:** 2023-03-01 - **Ecosystems:** golang ## Severity breakdown | Severity | CVEs | | --- | --- | | Critical | 1 | | High | 2 | | Medium | 6 | | Low | 0 | | Unscored | 0 | ## Most common weakness types | CWE | Name | CVEs | | --- | --- | --- | | [CWE-532](https://radicalnotion.ai/cwe/cwe-532) | Insertion of Sensitive Information into Log File | 3 | | [CWE-200](https://radicalnotion.ai/cwe/cwe-200) | Exposure of Sensitive Information to an Unauthorized Actor | 1 | | [CWE-22](https://radicalnotion.ai/cwe/cwe-22) | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 1 | | [CWE-20](https://radicalnotion.ai/cwe/cwe-20) | Improper Input Validation | 1 | | [CWE-284](https://radicalnotion.ai/cwe/cwe-284) | Improper Access Control | 1 | | [CWE-388](https://radicalnotion.ai/cwe/cwe-388) | 7PK - Errors | 1 | | [CWE-23](https://radicalnotion.ai/cwe/cwe-23) | Relative Path Traversal | 1 | ## CVEs by year | Year | CVEs published | | --- | --- | | 2015 | 1 | | 2016 | 2 | | 2017 | 0 | | 2018 | 1 | | 2019 | 0 | | 2020 | 3 | | 2021 | 0 | | 2022 | 0 | | 2023 | 2 | ## Affected versions (top 24 of 27) | Version | Kind | CVEs | | --- | --- | --- | | \< 1.17.13 | range | 2 | | 1.18.0 \<= v \< 1.18.10 | range | 2 | | 1.19.0 \<= v \< 1.19.3 | range | 2 | | 1.22.0 \<= v \< 1.22.16 | range | 2 | | 1.23.0 \<= v \< 1.23.14 | range | 2 | | 1.24.0 \<= v \< 1.24.8 | range | 2 | | 1.25.0 \<= v \< 1.25.4 | range | 2 | | \< 1.1.1 | range | 1 | | \< 1.10.11 | range | 1 | | \< 1.19.3 | range | 1 | | \< 1.2.0 | range | 1 | | \< 1.2.0-alpha.6 | range | 1 | | 1.19.3 | patched | 3 | | 1.17.13 | patched | 2 | | 1.18.10 | patched | 2 | | 1.22.16 | patched | 2 | | 1.23.14 | patched | 2 | | 1.24.8 | patched | 2 | | 1.25.4 | patched | 2 | | 1.1.1 | patched | 1 | | 1.10.11 | patched | 1 | | 1.11.5 | patched | 1 | | 1.12.3 | patched | 1 | | 1.2.0 | patched | 1 | ## CVEs | CVE | Title | Severity | CVSS | CISA KEV | Public exploit | Patch | | --- | --- | --- | --- | --- | --- | --- | | CVE-2022-3294 | Node address isn't always verified when proxying | high | 8.8 | No | No | Yes | | CVE-2022-3162 | Unauthorized read of Custom Resources | medium | 6.5 | No | No | Yes | | CVE-2020-8563 | Secret leaks in logs for vSphere Provider kube-controller-manager | medium | 6.3 | No | No | Yes | | CVE-2020-8564 | Docker config secrets leaked when file is malformed and loglevel \>= 4 | medium | 5.5 | No | No | Yes | | CVE-2020-8566 | Ceph RBD adminSecrets exposed in logs when loglevel \>= 4 | medium | 5.5 | No | No | Yes | | CVE-2018-1002105 | Privilege Escalation in Kubernetes | critical | 9.8 | No | Yes | Yes | | CVE-2015-7528 | Information Exposure in Kubernetes | medium | 5.3 | No | No | Yes | | CVE-2016-1905 | Access Restriction Bypass in kubernetes | high | 7.7 | No | No | Yes | | CVE-2015-5305 | Directory Traversal in Kubernetes | medium | 6.5 | No | No | Yes | ## Frequently asked questions ### How many CVEs does Kubernetes github.com/kubernetes/kubernetes have? Kubernetes github.com/kubernetes/kubernetes has 9 published CVE records since 2015. ### How many Kubernetes github.com/kubernetes/kubernetes CVEs are in CISA KEV? None of Kubernetes github.com/kubernetes/kubernetes's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog. ### Are there public exploits for Kubernetes github.com/kubernetes/kubernetes vulnerabilities? Yes — 1 of Kubernetes github.com/kubernetes/kubernetes's CVEs have a known public exploit. ### Which versions of Kubernetes github.com/kubernetes/kubernetes are affected? 27 distinct Kubernetes github.com/kubernetes/kubernetes versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version. ### What are the most common weakness types in Kubernetes github.com/kubernetes/kubernetes CVEs? Kubernetes github.com/kubernetes/kubernetes's CVEs most often map to these CWE weakness types: CWE-532 (Insertion of Sensitive Information into Log File), CWE-200 (Exposure of Sensitive Information to an Unauthorized Actor), CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-20 (Improper Input Validation). ### How many critical Kubernetes github.com/kubernetes/kubernetes vulnerabilities are there? Kubernetes github.com/kubernetes/kubernetes has 1 critical and 2 high-severity CVEs. ### What is the average severity of Kubernetes github.com/kubernetes/kubernetes CVEs? The average CVSS base score across Kubernetes github.com/kubernetes/kubernetes's scored CVEs is 6.9. ## Other products from this vendor - [Kubernetes](https://radicalnotion.ai/vendor/kubernetes/kubernetes) (78 CVEs) - [ingress-nginx](https://radicalnotion.ai/vendor/kubernetes/ingress-nginx) (24 CVEs) - [cri-o](https://radicalnotion.ai/vendor/kubernetes/cri-o) (10 CVEs) - [Kubelet](https://radicalnotion.ai/vendor/kubernetes/kubelet) (7 CVEs) - [Kubernetes ingress-nginx](https://radicalnotion.ai/vendor/kubernetes/kubernetes-ingress-nginx) (4 CVEs) - [Image Builder](https://radicalnotion.ai/vendor/kubernetes/image-builder) (3 CVEs) - [kube-apiserver](https://radicalnotion.ai/vendor/kubernetes/kube-apiserver) (3 CVEs) - [Minikube](https://radicalnotion.ai/vendor/kubernetes/minikube) (3 CVEs) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/vendor/kubernetes/github-com-kubernetes-kubernetes). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.