CVE-2024-5321
MediumAdvisory
Published 18 Jul 2024In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.1
- base score, highest
- EPSS
- 0.003
- 24th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 206
- of 17,781 indexed, latest versions
- Container images
- 180
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Kubernetes sets incorrect permissions on Windows containers logs
Carried by container images the latest versions of 206 of 17,781 indexed charts deploy, on 180 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| k8s.io/ | v0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+94 more | 1.27.16, 1.28.12, 1.29.7, 1.30.3 | 180 |
- OSV records
- GHSA-82m2-cv7p-4m75
- Also known as
- GO-2024-2994
Charts affected
206 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| longhornwenerme | 1.2.3 | 1 of 2See more | 15,230 |
| nfs-subdir-external-provisionerwenerme | 4.0.18 | 1 of 1See more | 2,743 |
| ceph-csi-cephfswikimedia | 0.1.8 | 1 of 5See more | 10,285 |
| ceph-csi-rbdwikimedia | 0.1.13 | 1 of 6See more | 11,784 |
| csi-driver-host-pathwiremindVerified publisher | 0.1.1 | 1 of 8See more | 12,606 |
| xkopsxkops | 0.1.0 | 1 of 5See more | 13,677 |
Container images carrying it
180 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| bitnamilegacy/ | 744f84cf7493 | k8s.io/ | 1.27.16 | 1 |
| bitnamilegacy/ | f5fc0d561d9e | k8s.io/ | 1.29.7 | 1 |
| breton/ | 41b1bb483aa2 | k8s.io/ | 1.27.16 | 1 |
| burganbank/ | 9259c34e4037 | k8s.io/ | 1.27.16 | 1 |
| calico/ | 385bf6391fea | k8s.io/ | 1.28.12 | 1 |
| cgtysylr/ | aec0f8a38a77 | k8s.io/ | 1.28.12 | 1 |
| chriswells0/ | f3918ec8471c | k8s.io/ | 1.27.16 | 1 |
| crowdfox/ | 6fa7e8063d27 | k8s.io/ | 1.27.16 | 1 |
| csiplugin/ | 1fa83d45417f | k8s.io/ | 1.27.16 | 1 |
| datadog/ | 8f20e56b5311 | k8s.io/ | 1.27.16 | 1 |
| datawire/ | 95ec30b3c732 | k8s.io/ | 1.30.3 | 1 |
| ddosify/ | ea602056d9ce | k8s.io/ | 1.29.7 | 1 |
| dongjiang1989/ | dc5bd483874c | k8s.io/ | 1.27.16 | 1 |
| dongjiang1989/ | 923085c65123 | k8s.io/ | 1.27.16 | 1 |
| dongjiang1989/ | f0055c05dbee | k8s.io/ | 1.27.16 | 1 |
| dserio83/ | 6b3d9115fee2 | k8s.io/ | 1.27.16 | 1 |
| dtzar/ | a1041bb0f1d1 | k8s.io/ | 1.27.16 | 1 |
| flomesh/ | cc39c96711c4 | k8s.io/ | 1.27.16 | 1 |
| flomesh/ | 22f849c70b25 | k8s.io/ | 1.27.16 | 1 |
| gocrane/ | a1400909118c | k8s.io/ | 1.27.16 | 1 |
| gocrane/ | 9ba6d11b2079 | k8s.io/ | 1.27.16 | 1 |
| gocrane/ | a2d7e60576f9 | k8s.io/ | 1.27.16 | 1 |
| groundnuty/ | a26d3d3f6e1c | k8s.io/ | 1.27.16 | 1 |
| hetznercloud/ | 41dce5b33644 | k8s.io/ | 1.27.16 | 1 |
| huzafach/ | 6e271d43ea48 | k8s.io/ | 1.27.16 | 1 |
| inaccel/ | a5d3d0af05c1 | k8s.io/ | 1.29.7 | 1 |
| inseefrlab/ | 31f04ca7436b | k8s.io/ | 1.29.7 | 1 |
| j0113/ | 696cb8ca9f4e | k8s.io/ | 1.27.16 | 1 |
| kubeedge/ | 460c6061b608 | k8s.io/ | 1.27.16 | 1 |
| kubesphere/ | 49b445b1b732 | k8s.io/ | 1.27.16 | 1 |
| kubevirtmanager/ | df3ea27d4a9e | k8s.io/ | 1.29.7 | 1 |
| kusionstack/ | b707d3bf0abd | k8s.io/ | 1.27.16 | 1 |
| kusionstack/ | d2f72ae1d2f2 | k8s.io/ | 1.27.16 | 1 |
| kusionstack/ | c28bd96b986b | k8s.io/ | 1.27.16 | 1 |
| leonardomulticloud/ | d119918900e8 | k8s.io/ | 1.27.16 | 1 |
| longhornio/ | dca34321452c | k8s.io/ | 1.27.16 | 1 |
| longhornio/ | ede61fe2a472 | k8s.io/ | 1.27.16 | 1 |
| mesosphere/ | 63bc411b930b | k8s.io/ | 1.27.16 | 1 |
| mesosphere/ | b036785a8862 | k8s.io/ | 1.27.16 | 1 |
| mesosphere/ | 94af41b6dd9a | k8s.io/ | 1.27.16 | 1 |
| murtazashah46/ | 4d11726cf803 | k8s.io/ | 1.27.16 | 1 |
| natsio/ | 1261dae38389 | k8s.io/ | 1.27.16 | 1 |
| openebs/ | 4f41dd782761 | k8s.io/ | 1.27.16 | 1 |
| openpolicyagent/ | 77bc9bf3d163 | k8s.io/ | 1.27.16 | 1 |
| phntom/ | 3adadbac8443 | k8s.io/ | 1.27.16 | 1 |
| pnnlmiscscripts/ | 155131891741 | k8s.io/ | 1.27.16 | 1 |
| portainer/ | 3e61aaee1341 | k8s.io/ | 1.27.16 | 1 |
| rancher/ | 6d2cd61a338b | k8s.io/ | 1.27.16 | 1 |
| rancher/ | c678c25d47c8 | k8s.io/ | 1.27.16 | 1 |
| rancher/ | 8eb8092f0728 | k8s.io/ | 1.27.16 | 1 |