Bug 2215555 (CVE-2023-2431) - CVE-2023-2431 kubernetes: Bypass of seccomp profile enforcement
Summary: CVE-2023-2431 kubernetes: Bypass of seccomp profile enforcement
Keywords:
Status: NEW
Alias: CVE-2023-2431
Product: Security Response
Classification: Other
Component: vulnerability
Version: unspecified
Hardware: All
OS: Linux
low
low
Target Milestone: ---
Assignee: Nobody
QA Contact:
URL:
Whiteboard:
Depends On: 2219241 2215556 2215559 2215560 2215561 2219238 2219239 2219240 2219242 2219260
Blocks: 2215557
TreeView+ depends on / blocked
 
Reported: 2023-06-16 13:59 UTC by Guilherme de Almeida Suckevicz
Modified: 2024-02-07 07:52 UTC (History)
58 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
A flaw was found in Kubernetes. This issue occurs when Kubernetes allows a local authenticated attacker to bypass security restrictions, caused by a flaw when using the localhost type for a seccomp profile but specifying an empty profile field. An attacker can bypass the seccomp profile enforcement by sending a specially crafted request.
Clone Of:
Environment:
Last Closed:
Embargoed:

Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2023:6156 0 None None None 2023-10-30 00:25:16 UTC

Description Guilherme de Almeida Suckevicz 2023-06-16 13:59:30 UTC 
A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined (seccomp disabled) mode. This bug affects Kubelet.

References:
https://groups.google.com/g/kubernetes-security-announce/c/QHmx0HOQa10
https://github.com/kubernetes/kubernetes/issues/118690
Comment 1 Guilherme de Almeida Suckevicz 2023-06-16 13:59:52 UTC 
Created kubernetes tracking bugs for this issue:

Affects: fedora-all [bug 2215556]
Comment 4 Fedora Update System 2023-06-27 10:55:07 UTC 
FEDORA-2023-c7f63322b5 has been pushed to the Fedora 38 stable repository.
If problem still persists, please make note of it in this bug report.
Comment 13 errata-xmlrpc 2023-10-30 00:25:13 UTC 
This issue has been addressed in the following products:

  Red Hat OpenShift Container Platform 4.13

Via RHSA-2023:6156 https://access.redhat.com/errata/RHSA-2023:6156
Note You need to log in before you can comment on or make changes to this bug.