CVE-2023-2431

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-2431
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-2431.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-2431
Aliases
Downstream
Related
Published
2023-06-16T07:08:33.476Z
Modified
2026-07-15T01:49:08.958900976Z
Severity
  • 3.4 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N CVSS Calculator
Summary
Bypass of seccomp profile enforcement
Details

A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined (seccomp disabled) mode. This bug affects Kubelet.

Database specific 
{
    "cwe_ids": [
        "CWE-1287"
    ],
    "cna_assigner": "kubernetes",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/2xxx/CVE-2023-2431.json"
}
References

Affected packages

Git / github.com/kubernetes/kubelet

Affected ranges

Type
GIT
Repo
https://github.com/kubernetes/kubelet
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
e222ce84c343045e6a50a93a3a71b4d94c72e141
Introduced
d37f045d808033445aaa284ad80454c948b37958
Fixed
fdaba096539e39e41984eed38de069976b9b07a7
Introduced
202e223fff3b2425eb941c13ff02e10b8e11a568
Fixed
f516e7be6d15d5e9d21d166435a74c996fbb84c7
Introduced
bc4c2f36af4e19e04b0d09b6fe4d101916a504fb
Fixed
718179a9d8ea0b27723e4a2ef4c6d18347c0a919
Database specific 
{
    "cpe": "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.24.14"
        },
        {
            "introduced": "1.25.0"
        },
        {
            "fixed": "1.25.10"
        },
        {
            "introduced": "1.26.0"
        },
        {
            "fixed": "1.26.5"
        },
        {
            "introduced": "1.27.0"
        },
        {
            "fixed": "1.27.2"
        }
    ],
    "source": "CPE_RANGE"
}
Type
GIT
Repo
https://github.com/kubernetes/kubernetes
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
0018fa8af8ffaff22f36d3bd86289753ca61da81
Introduced
a866cbe2e5bbaa01cfd5e969aa3e033f3282a8a2
Fixed
e770bdbb87cccdc2daa790ecd69f40cf4df3cc9d
Introduced
b46a3f887ca979b1a5d14fd39cb1af43e7e5d12d
Fixed
890a139214b4de1f01543d15003b5bda71aae9c7
Introduced
1b4df30b3cdfeaba6024e81e559a6cd09a089d65
Fixed
7f6f68fdabc4df88cfea2dcf9a19b2b830f1e647
Database specific 
{
    "cpe": "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.24.14"
        },
        {
            "introduced": "1.25.0"
        },
        {
            "fixed": "1.25.10"
        },
        {
            "introduced": "1.26.0"
        },
        {
            "fixed": "1.26.5"
        },
        {
            "introduced": "1.27.0"
        },
        {
            "fixed": "1.27.2"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

kubernetes-1.*
kubernetes-1.10.0-alpha.0
kubernetes-1.10.0-alpha.1
kubernetes-1.10.0-alpha.2
kubernetes-1.10.0-alpha.3
kubernetes-1.11.0-alpha.0
kubernetes-1.11.0-alpha.1
kubernetes-1.11.0-alpha.2
kubernetes-1.12.0-alpha.0
kubernetes-1.12.0-alpha.1
kubernetes-1.12.0-beta.0
kubernetes-1.13.0-alpha.0
kubernetes-1.9.0-alpha.0
kubernetes-1.9.0-alpha.1
kubernetes-1.9.0-alpha.2
kubernetes-1.9.0-alpha.3
v0.*
v0.13.1-dev
v0.17.0
v1.*
v1.1.0-alpha.0
v1.1.0-alpha.1
v1.10.0-alpha.0
v1.10.0-alpha.1
v1.10.0-alpha.2
v1.10.0-alpha.3
v1.11.0-alpha.0
v1.11.0-alpha.1
v1.11.0-alpha.2
v1.12.0-alpha.0
v1.12.0-alpha.1
v1.13.0-alpha.0
v1.13.0-alpha.1
v1.13.0-alpha.2
v1.13.0-alpha.3
v1.14.0-alpha.0
v1.14.0-alpha.1
v1.14.0-alpha.2
v1.14.0-alpha.3
v1.15.0-alpha.0
v1.15.0-alpha.1
v1.15.0-alpha.2
v1.15.0-alpha.3
v1.16.0-alpha.0
v1.16.0-alpha.1
v1.16.0-alpha.2
v1.16.0-alpha.3
v1.17.0-alpha.0
v1.17.0-alpha.1
v1.17.0-alpha.2
v1.17.0-alpha.3
v1.18.0-alpha.0
v1.18.0-alpha.1
v1.18.0-alpha.2
v1.18.0-alpha.4
v1.18.0-alpha.5
v1.19.0-alpha.0
v1.19.0-alpha.1
v1.19.0-alpha.2
v1.19.0-alpha.3
v1.19.0-beta.0
v1.19.0-beta.1
v1.19.0-beta.2
v1.2.0-alpha.1
v1.2.0-alpha.2
v1.2.0-alpha.3
v1.2.0-alpha.4
v1.2.0-alpha.5
v1.2.0-alpha.6
v1.2.0-alpha.7
v1.2.0-alpha.8
v1.20.0-alpha.0
v1.20.0-alpha.1
v1.20.0-alpha.2
v1.20.0-alpha.3
v1.20.0-beta.0
v1.20.0-beta.1
v1.20.0-beta.2
v1.21.0-alpha.0
v1.21.0-alpha.1
v1.21.0-alpha.2
v1.21.0-alpha.3
v1.21.0-beta.0
v1.21.0-beta.1
v1.22.0-alpha.0
v1.22.0-alpha.1
v1.22.0-alpha.2
v1.22.0-alpha.3
v1.22.0-beta.0
v1.22.0-beta.1
v1.22.0-beta.2
v1.23.0-alpha.0
v1.23.0-alpha.1
v1.23.0-alpha.2
v1.23.0-alpha.3
v1.23.0-alpha.4
v1.24.0
v1.24.0-alpha.0
v1.24.0-alpha.1
v1.24.0-alpha.2
v1.24.0-alpha.3
v1.24.0-alpha.4
v1.24.0-beta.0
v1.24.0-rc.0
v1.24.0-rc.1
v1.24.1
v1.24.1-rc.0
v1.24.10
v1.24.10-rc.0
v1.24.11
v1.24.11-rc.0
v1.24.12
v1.24.12-rc.0
v1.24.13
v1.24.2
v1.24.2-rc.0
v1.24.3
v1.24.3-rc.0
v1.24.4
v1.24.4-rc.0
v1.24.5
v1.24.5-rc.0
v1.24.6
v1.24.6-rc.0
v1.24.7
v1.24.7-rc.0
v1.24.8
v1.24.8-rc.0
v1.24.9
v1.24.9-rc.0
v1.25.0
v1.25.0-alpha.0
v1.25.1
v1.25.1-rc.0
v1.25.2
v1.25.2-rc.0
v1.25.3
v1.25.3-rc.0
v1.25.4
v1.25.4-rc.0
v1.25.5
v1.25.5-rc.0
v1.25.6
v1.25.6-rc.0
v1.25.7
v1.25.7-rc.0
v1.25.8
v1.25.8-rc.0
v1.25.9
v1.26.0
v1.26.1
v1.26.1-rc.0
v1.26.2
v1.26.2-rc.0
v1.26.3
v1.26.3-rc.0
v1.26.4
v1.27.0
v1.27.1
v1.3.0-alpha.0
v1.3.0-alpha.1
v1.3.0-alpha.2
v1.3.0-alpha.3
v1.3.0-alpha.4
v1.3.0-alpha.5
v1.4.0-alpha.1
v1.4.0-alpha.2
v1.4.0-alpha.3
v1.5.0-alpha.0
v1.5.0-alpha.1
v1.5.0-alpha.2
v1.6.0-alpha.0
v1.6.0-alpha.1
v1.6.0-alpha.2
v1.6.0-alpha.3
v1.7.0-alpha.0
v1.7.0-alpha.1
v1.7.0-alpha.2
v1.7.0-alpha.3
v1.7.0-alpha.4
v1.8.0-alpha.0
v1.8.0-alpha.1
v1.8.0-alpha.2
v1.8.0-alpha.3
v1.9.0-alpha.0
v1.9.0-alpha.1
v1.9.0-alpha.2
v1.9.0-alpha.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-2431.json"