Skip to content
OpenAdvisories
High · 8.0 CVE-2023-1943 EUVD-2023-2699GHSA-8gwj-m6vh-2g6jGO-2023-2125

Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode

Published Oct 11, 2023 · Updated Sep 18, 2024 · Assigned by kubernetes

Vendor: Kubernetes Product: kops Package: k8s.io/kops Ecosystem: Go

Description

Privilege Escalation in kOps using GCE/GCP Provider in Gossip Mode.

Affected products

VendorProductAffectedFixed
Kubernetes kops < 1.25.3, 1.26.0 – < 1.26.2 1.25.3

Affected packages

EcosystemPackageAffectedFixedRecord
Go k8s.io/kops < 1.25.4 1.25.4 GHSA-8gwj-m6vh-2g6j
Go k8s.io/kops >= 1.26.0, < 1.26.2 1.26.2 GHSA-8gwj-m6vh-2g6j
Go k8s.io/kops < 1.25.4 · >= 1.26.0, < 1.26.2 1.25.4, 1.26.2 GO-2023-2125

Advisories 1

References