CVE-2024-5321
MediumAdvisory
Published 18 Jul 2024In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.1
- base score, highest
- EPSS
- 0.003
- 24th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 206
- of 17,781 indexed, latest versions
- Container images
- 180
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Kubernetes sets incorrect permissions on Windows containers logs
Carried by container images the latest versions of 206 of 17,781 indexed charts deploy, on 180 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| k8s.io/ | v0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+94 more | 1.27.16, 1.28.12, 1.29.7, 1.30.3 | 180 |
- OSV records
- GHSA-82m2-cv7p-4m75
- Also known as
- GO-2024-2994
Charts affected
206 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| longhornwenerme | 1.2.3 | 1 of 2See more | 15,230 |
| nfs-subdir-external-provisionerwenerme | 4.0.18 | 1 of 1See more | 2,743 |
| ceph-csi-cephfswikimedia | 0.1.8 | 1 of 5See more | 10,285 |
| ceph-csi-rbdwikimedia | 0.1.13 | 1 of 6See more | 11,784 |
| csi-driver-host-pathwiremindVerified publisher | 0.1.1 | 1 of 8See more | 12,606 |
| xkopsxkops | 0.1.0 | 1 of 5See more | 13,677 |
Container images carrying it
180 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| clastix/ | 22918a06c253 | k8s.io/ | 1.27.16 | 6 |
| quay.io/ | 2ad610626658 | k8s.io/ | 1.27.16 | 6 |
| bitnamilegacy/ | c74b703deed2 | k8s.io/ | 1.29.7 | 5 |
| quay.io/ | e6df72478956 | k8s.io/ | 1.27.16 | 5 |
| argoproj/ | 830e86cacefd | k8s.io/ | 1.27.16 | 3 |
| groundnuty/ | c14d7271e401 | k8s.io/ | 1.27.16 | 3 |
| quay.io/ | 6545dac92173 | k8s.io/ | 1.27.16 | 3 |
| quay.io/ | 2b6db27eaf3d | k8s.io/ | 1.27.16 | 3 |
| quay.io/ | bc4aa22272ef | k8s.io/ | 1.27.16 | 3 |
| quay.io/ | 4c3b91bebd3d | k8s.io/ | 1.27.16 | 3 |
| quay.io/ | f296c2ec5db7 | k8s.io/ | 1.27.16 | 3 |
| quay.io/ | eec0305b594c | k8s.io/ | 1.27.16 | 3 |
| quay.io/ | 9640e2dc4316 | k8s.io/ | 1.29.7 | 3 |
| quay.io/ | 1b33357b3595 | k8s.io/ | 1.27.16 | 3 |
| registry.k8s.io/ | 99b37df34bc4 | k8s.io/ | 1.27.16 | 3 |
| aquasec/ | ea3e33bc3c4e | k8s.io/ | 1.28.12 | 2 |
| bitnamilegacy/ | a0a972324d93 | k8s.io/ | 1.27.16 | 2 |
| csiplugin/ | 0766163dc046 | k8s.io/ | 1.27.16 | 2 |
| dtzar/ | 55429449408e | k8s.io/ | 1.29.7 | 2 |
| iomesh/ | f13deacac3f4 | k8s.io/ | 1.27.16 | 2 |
| k0sproject/ | f04635825d51 | k8s.io/ | 1.27.16 | 2 |
| lachlanevenson/ | af5cea3f2e40 | k8s.io/ | 1.27.16 | 2 |
| uffizzi/ | 0344805f267b | k8s.io/ | 1.29.7 | 2 |
| ghcr.io/ | 82d0b161161d | k8s.io/ | 1.27.16 | 2 |
| ghcr.io/ | c137478627cc | k8s.io/ | 1.27.16 | 2 |
| public.ecr.aws/ | 1564359e1e0e | k8s.io/ | 1.27.16 | 2 |
| quay.io/ | f7f8228f17cc | k8s.io/ | 1.27.16 | 2 |
| quay.io/ | 00406ccb1fa0 | k8s.io/ | 1.27.16 | 2 |
| quay.io/ | 382fca2054c9 | k8s.io/ | 1.27.16 | 2 |
| registry.k8s.io/ | 99e1ed9fbc8a | k8s.io/ | 1.27.16 | 2 |
| registry.k8s.io/ | 40adecbe3a40 | k8s.io/ | 1.27.16 | 2 |
| registry.k8s.io/ | 74a5cf9cfa9f | k8s.io/ | 1.27.16 | 2 |
| registry.k8s.io/ | 63d5e04551ec | k8s.io/ | 1.27.16 | 2 |
| airbyte/ | 98d2c39d512e | k8s.io/ | 1.27.16 | 1 |
| alpine/ | 21b24e6bf801 | k8s.io/ | 1.27.16 | 1 |
| alpine/ | 6dbe6f391eda | k8s.io/ | 1.27.16 | 1 |
| alpine/ | 7a319b15cfc9 | k8s.io/ | 1.27.16 | 1 |
| alpine/ | 7e1e7d5b7a96 | k8s.io/ | 1.27.16 | 1 |
| alpine/ | 9c4976d47656 | k8s.io/ | 1.27.16 | 1 |
| alpine/ | bd01dae02676 | k8s.io/ | 1.27.16 | 1 |
| alpine/ | cd560fce90f7 | k8s.io/ | 1.27.16 | 1 |
| alpine/ | e5c0b053fed7 | k8s.io/ | 1.27.16 | 1 |
| alpine/ | eec354133193 | k8s.io/ | 1.27.16 | 1 |
| alpine/ | fc059f056ad0 | k8s.io/ | 1.28.12 | 1 |
| amazon/ | b55277652ea8 | k8s.io/ | 1.27.16 | 1 |
| ambassador/ | 7a1ea0d934fb | k8s.io/ | 1.28.12 | 1 |
| apecloud/ | 98abc64aa985 | k8s.io/ | 1.28.12 | 1 |
| apecloud/ | c93655ccb2d7 | k8s.io/ | 1.27.16 | 1 |
| bitnamilegacy/ | 1249fc292e84 | k8s.io/ | 1.27.16 | 1 |
| bitnamilegacy/ | 64614ef8290f | k8s.io/ | 1.27.16 | 1 |