Wind River Support Network

HomeDefectsLIN1018-11149

Fixed

LIN1018-11149 : Security Advisory - kubernetes - CVE-2023-3893

Created: Aug 23, 2023 Updated: Oct 24, 2023

Resolved Date: Oct 24, 2023

Found In Version: 10.18.44.1

Severity: Standard

Applicable for: Wind River Linux LTS 18

Component/s: Userspace

Description

kubernetes: Insufficient input sanitization on kubernetes-csi-proxy leads to privilege escalation

https://github.com/kubernetes/kubernetes/issues/119594

CREATE(Triage):(User=admin) CVE-2023-3893 (https://nvd.nist.gov/vuln/detail/CVE-2023-3893)