Database/Container, Kubernetes & orchestration

Kubernetes (kubelet): Incorrect permissions on Windows container log directories allow privilege escalation

CVSS 6.1CVE-2024-5321Container, Kubernetes & orchestrationcurated

Impact

Incorrect permissions on Windows container log directories allow privilege escalation

Who can reach it

Any tenant workload on a Windows node

What to do

Rolling kubelet upgrade; Windows node drain

References

https://kubernetes.io/docs/reference/issues-security/official-cve-feed/

Related entries

Kubernetes (kubelet): Command injection on Windows nodes via the nodes/*/logs/query APICVE-2024-9042 · Kubernetes (kubelet)Medium
Kubernetes (kubelet): Pod writes to its own /etc/hosts unaccounted for in evictionCVE-2020-8557 · Kubernetes (kubelet)Medium
Kubernetes (kubelet): Container restart runs as uid 0 despite mustRunAsNonRootCVE-2019-11245 · Kubernetes (kubelet)Medium
Kubernetes (kubelet): Kubelet API DoS, including via the unauthenticated read-only portCVE-2020-8551 · Kubernetes (kubelet)Medium
Kubernetes (kubelet): Pods with an empty localhost seccomp profile field silently bypass seccomp enforcementCVE-2023-2431 · Kubernetes (kubelet)Low
Kubernetes (kubelet): subPath volume mount symlink race gives access to host files and directories outside the volumeCVE-2021-25741 · Kubernetes (kubelet)High

All Container, Kubernetes & orchestration entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.