CVE-2023-2727

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2023-2727
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-2727.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-2727
Aliases
Related
Published
2023-07-03T21:15:09Z
Modified
2025-03-29T06:05:27.583362Z
Downstream
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
[none]
Details

Users may be able to launch containers using images that are restricted by ImagePolicyWebhook when using ephemeral containers. Kubernetes clusters are only affected if the ImagePolicyWebhook admission plugin is used together with ephemeral containers.

References

Affected packages

Debian:11 / kubernetes

Package

Name
kubernetes
Purl
pkg:deb/debian/kubernetes?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.5+really1.20.2-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / kubernetes

Package

Name
kubernetes
Purl
pkg:deb/debian/kubernetes?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.5+really1.20.2-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / kubernetes

Package

Name
kubernetes
Purl
pkg:deb/debian/kubernetes?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.5+really1.20.2-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/kubernetes/kubelet

Affected ranges

Type
GIT
Repo
https://github.com/kubernetes/kubelet
Events
Introduced
bc4c2f36af4e19e04b0d09b6fe4d101916a504fb
Last affected
718179a9d8ea0b27723e4a2ef4c6d18347c0a919
Last affected
e222ce84c343045e6a50a93a3a71b4d94c72e141
Introduced
202e223fff3b2425eb941c13ff02e10b8e11a568
Last affected
f516e7be6d15d5e9d21d166435a74c996fbb84c7
Introduced
d37f045d808033445aaa284ad80454c948b37958
Last affected
fdaba096539e39e41984eed38de069976b9b07a7
Type
GIT
Repo
https://github.com/kubernetes/kubernetes
Events
Last affected
0018fa8af8ffaff22f36d3bd86289753ca61da81
Introduced
1b4df30b3cdfeaba6024e81e559a6cd09a089d65
Last affected
7f6f68fdabc4df88cfea2dcf9a19b2b830f1e647
Introduced
b46a3f887ca979b1a5d14fd39cb1af43e7e5d12d
Last affected
890a139214b4de1f01543d15003b5bda71aae9c7
Introduced
a866cbe2e5bbaa01cfd5e969aa3e033f3282a8a2
Last affected
e770bdbb87cccdc2daa790ecd69f40cf4df3cc9d

Affected versions

v1.*

v1.25.0
v1.25.1
v1.25.1-rc.0
v1.25.10
v1.25.2
v1.25.2-rc.0
v1.25.3
v1.25.3-rc.0
v1.25.4
v1.25.4-rc.0
v1.25.5
v1.25.5-rc.0
v1.25.6
v1.25.6-rc.0
v1.25.7
v1.25.7-rc.0
v1.25.8
v1.25.8-rc.0
v1.25.9
v1.26.0
v1.26.1
v1.26.1-rc.0
v1.26.2
v1.26.2-rc.0
v1.26.3
v1.26.3-rc.0
v1.26.4
v1.26.5
v1.27.0
v1.27.1
v1.27.2