CVE-2024-10220
HighAdvisory
Published 22 Nov 2024In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 8.1
- base score, highest
- EPSS
- 0.030
- 87th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 206
- of 17,781 indexed, latest versions
- Container images
- 180
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Kubernetes kubelet arbitrary command execution
Carried by container images the latest versions of 206 of 17,781 indexed charts deploy, on 180 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| k8s.io/ | v0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+94 more | 1.28.12, 1.29.7, 1.30.3 | 180 |
- OSV records
- GHSA-27wf-5967-98gx
- Also known as
- GO-2024-3286
Charts affected
206 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| longhornwenerme | 1.2.3 | 1 of 2See more | 15,230 |
| nfs-subdir-external-provisionerwenerme | 4.0.18 | 1 of 1See more | 2,743 |
| ceph-csi-cephfswikimedia | 0.1.8 | 1 of 5See more | 10,285 |
| ceph-csi-rbdwikimedia | 0.1.13 | 1 of 6See more | 11,784 |
| csi-driver-host-pathwiremindVerified publisher | 0.1.1 | 1 of 8See more | 12,606 |
| xkopsxkops | 0.1.0 | 1 of 5See more | 13,677 |
Container images carrying it
180 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| rancher/ | 85a0d1148784 | k8s.io/ | 1.28.12 | 1 |
| sealio/ | b0389d9848a5 | k8s.io/ | 1.28.12 | 1 |
| shlomibendavid/ | a22ffbe0f04e | k8s.io/ | 1.29.7 | 1 |
| sikalabs/ | 7bd267f30247 | k8s.io/ | 1.28.12 | 1 |
| veecode/ | c69fd286b489 | k8s.io/ | 1.28.12 | 1 |
| vineyardcloudnative/ | 9d419aa18faa | k8s.io/ | 1.28.12 | 1 |
| webdevops/ | 7acd46a8a972 | k8s.io/ | 1.28.12 | 1 |
| gcr.io/ | a4011eae6a0b | k8s.io/ | 1.28.12 | 1 |
| gcr.io/ | 2b1a3d08caac | k8s.io/ | 1.28.12 | 1 |
| gcr.io/ | a348db3e4d74 | k8s.io/ | 1.28.12 | 1 |
| gcr.io/ | 39661bd823e8 | k8s.io/ | 1.28.12 | 1 |
| gcr.io/ | dc6ca05bb94f | k8s.io/ | 1.28.12 | 1 |
| gcr.io/ | 293941ee4f65 | k8s.io/ | 1.28.12 | 1 |
| gcr.io/ | 83e79c709df3 | k8s.io/ | 1.28.12 | 1 |
| gcr.io/ | 00db9796a37b | k8s.io/ | 1.28.12 | 1 |
| gcr.io/ | 109ac1b38c41 | k8s.io/ | 1.28.12 | 1 |
| gcr.io/ | 795a0c8a0e13 | k8s.io/ | 1.28.12 | 1 |
| gcr.io/ | f7e67e0bc071 | k8s.io/ | 1.28.12 | 1 |
| ghcr.io/ | 9ab9a675c405 | k8s.io/ | 1.28.12 | 1 |
| ghcr.io/ | a058034ca006 | k8s.io/ | 1.28.12 | 1 |
| ghcr.io/ | 29ecf8d4fa65 | k8s.io/ | 1.28.12 | 1 |
| ghcr.io/ | 16fda01ae58a | k8s.io/ | 1.28.12 | 1 |
| ghcr.io/ | e37d61b5277c | k8s.io/ | 1.28.12 | 1 |
| ghcr.io/ | f53bde3acd4f | k8s.io/ | 1.29.7 | 1 |
| ghcr.io/ | bbef381294ed | k8s.io/ | 1.28.12 | 1 |
| ghcr.io/ | 274a179fd402 | k8s.io/ | 1.28.12 | 1 |
| ghcr.io/ | c7adcc4db378 | k8s.io/ | 1.28.12 | 1 |
| ghcr.io/ | aca1bbd609b6 | k8s.io/ | 1.28.12 | 1 |
| ghcr.io/ | 94c9a3e799c2 | k8s.io/ | 1.28.12 | 1 |
| ghcr.io/ | e72aa733faf2 | k8s.io/ | 1.28.12 | 1 |
| ghcr.io/ | c8882543f693 | k8s.io/ | 1.29.7 | 1 |
| ghcr.io/ | 0f7d277bb2b2 | k8s.io/ | 1.28.12 | 1 |
| ghcr.io/ | a7fce69e171c | k8s.io/ | 1.28.12 | 1 |
| ghcr.io/ | 6de40f528be9 | k8s.io/ | 1.29.7 | 1 |
| ghcr.io/ | b5ade0d9cc6b | k8s.io/ | 1.28.12 | 1 |
| ghcr.io/ | 0cca6760763a | k8s.io/ | 1.29.7 | 1 |
| ghcr.io/ | 313edfec2fca | k8s.io/ | 1.28.12 | 1 |
| ghcr.io/ | 087618d16b83 | k8s.io/ | 1.28.12 | 1 |
| ghcr.io/ | 5e409a6332b4 | k8s.io/ | 1.28.12 | 1 |
| ghcr.io/ | 0b2a41c2a43e | k8s.io/ | 1.28.12 | 1 |
| ghcr.io/ | 5dfa86b6451f | k8s.io/ | 1.29.7 | 1 |
| ghcr.io/ | b69bcdaa8492 | k8s.io/ | 1.28.12 | 1 |
| ghcr.io/ | 45e744fc623f | k8s.io/ | 1.29.7 | 1 |
| ghcr.io/ | b5d7681d1b9d | k8s.io/ | 1.28.12 | 1 |
| ghcr.io/ | 4d337e14c80b | k8s.io/ | 1.28.12 | 1 |
| ghcr.io/ | b61c750ade19 | k8s.io/ | 1.28.12 | 1 |
| ghcr.io/ | 8bb9411e47e0 | k8s.io/ | 1.29.7 | 1 |
| ghcr.io/ | 42304e3ed36e | k8s.io/ | 1.29.7 | 1 |
| ghcr.io/ | 9f157fe035f1 | k8s.io/ | 1.28.12 | 1 |
| ghcr.io/ | 9d01bf9c9224 | k8s.io/ | 1.28.12 | 1 |