CVE-2023-3676
HighAdvisory
Published 31 Oct 2023In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.8
- base score, highest
- EPSS
- 0.132
- 96th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 168
- of 17,781 indexed, latest versions
- Container images
- 145
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Kubernetes privilege escalation vulnerability
Carried by container images the latest versions of 168 of 17,781 indexed charts deploy, on 145 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| k8s.io/ | v0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+78 more | 1.24.17, 1.25.13, 1.26.8, 1.27.5+1 more | 145 |
- OSV records
- GHSA-7fxm-f474-hf8w
- Also known as
- GO-2023-2330
Charts affected
168 by stars
Container images carrying it
145 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| dongjiang1989/ | f0055c05dbee | k8s.io/ | 1.25.13 | 1 |
| dserio83/ | 6b3d9115fee2 | k8s.io/ | 1.24.17 | 1 |
| dtzar/ | a1041bb0f1d1 | k8s.io/ | 1.26.8 | 1 |
| flomesh/ | cc39c96711c4 | k8s.io/ | 1.26.8 | 1 |
| flomesh/ | 22f849c70b25 | k8s.io/ | 1.26.8 | 1 |
| gocrane/ | a1400909118c | k8s.io/ | 1.24.17 | 1 |
| gocrane/ | 9ba6d11b2079 | k8s.io/ | 1.24.17 | 1 |
| gocrane/ | a2d7e60576f9 | k8s.io/ | 1.24.17 | 1 |
| groundnuty/ | a26d3d3f6e1c | k8s.io/ | 1.25.13 | 1 |
| hetznercloud/ | 41dce5b33644 | k8s.io/ | 1.24.17 | 1 |
| huzafach/ | 6e271d43ea48 | k8s.io/ | 1.24.17 | 1 |
| j0113/ | 696cb8ca9f4e | k8s.io/ | 1.24.17 | 1 |
| kubeedge/ | 460c6061b608 | k8s.io/ | 1.24.17 | 1 |
| kubesphere/ | 49b445b1b732 | k8s.io/ | 1.24.17 | 1 |
| kusionstack/ | b707d3bf0abd | k8s.io/ | 1.26.8 | 1 |
| kusionstack/ | d2f72ae1d2f2 | k8s.io/ | 1.24.17 | 1 |
| kusionstack/ | c28bd96b986b | k8s.io/ | 1.24.17 | 1 |
| leonardomulticloud/ | d119918900e8 | k8s.io/ | 1.24.17 | 1 |
| longhornio/ | dca34321452c | k8s.io/ | 1.24.17 | 1 |
| longhornio/ | ede61fe2a472 | k8s.io/ | 1.24.17 | 1 |
| mesosphere/ | 63bc411b930b | k8s.io/ | 1.24.17 | 1 |
| mesosphere/ | b036785a8862 | k8s.io/ | 1.24.17 | 1 |
| mesosphere/ | 94af41b6dd9a | k8s.io/ | 1.24.17 | 1 |
| murtazashah46/ | 4d11726cf803 | k8s.io/ | 1.24.17 | 1 |
| natsio/ | 1261dae38389 | k8s.io/ | 1.24.17 | 1 |
| openebs/ | 4f41dd782761 | k8s.io/ | 1.24.17 | 1 |
| openpolicyagent/ | 77bc9bf3d163 | k8s.io/ | 1.24.17 | 1 |
| phntom/ | 3adadbac8443 | k8s.io/ | 1.25.13 | 1 |
| pnnlmiscscripts/ | 155131891741 | k8s.io/ | 1.24.17 | 1 |
| portainer/ | 3e61aaee1341 | k8s.io/ | 1.26.8 | 1 |
| rancher/ | 6d2cd61a338b | k8s.io/ | 1.24.17 | 1 |
| rancher/ | c678c25d47c8 | k8s.io/ | 1.24.17 | 1 |
| rancher/ | 8eb8092f0728 | k8s.io/ | 1.24.17 | 1 |
| rancher/ | 85a0d1148784 | k8s.io/ | 1.25.13 | 1 |
| sealio/ | b0389d9848a5 | k8s.io/ | 1.25.13 | 1 |
| sikalabs/ | 7bd267f30247 | k8s.io/ | 1.24.17 | 1 |
| veecode/ | c69fd286b489 | k8s.io/ | 1.24.17 | 1 |
| vineyardcloudnative/ | 9d419aa18faa | k8s.io/ | 1.24.17 | 1 |
| webdevops/ | 7acd46a8a972 | k8s.io/ | 1.24.17 | 1 |
| gcr.io/ | a4011eae6a0b | k8s.io/ | 1.24.17 | 1 |
| gcr.io/ | 2b1a3d08caac | k8s.io/ | 1.24.17 | 1 |
| gcr.io/ | a348db3e4d74 | k8s.io/ | 1.24.17 | 1 |
| gcr.io/ | 39661bd823e8 | k8s.io/ | 1.24.17 | 1 |
| gcr.io/ | dc6ca05bb94f | k8s.io/ | 1.24.17 | 1 |
| gcr.io/ | 293941ee4f65 | k8s.io/ | 1.24.17 | 1 |
| gcr.io/ | 83e79c709df3 | k8s.io/ | 1.24.17 | 1 |
| gcr.io/ | 00db9796a37b | k8s.io/ | 1.24.17 | 1 |
| gcr.io/ | 109ac1b38c41 | k8s.io/ | 1.24.17 | 1 |
| gcr.io/ | 795a0c8a0e13 | k8s.io/ | 1.24.17 | 1 |
| gcr.io/ | f7e67e0bc071 | k8s.io/ | 1.24.17 | 1 |