CVE-2023-2431 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2023-2431 Interim 1 6 2023-08-08T23:20:35Z current 2023-06-19T23:16:26Z 2023-08-08T23:20:35Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2023-2431 A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined (seccomp disabled) mode. This bug affects Kubelet. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-updates/2023-June/030117.html E-Mail link for SUSE-SU-2023:2691-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE CaaS Platform 4.0 SUSE Enterprise Storage 7 SUSE Enterprise Storage 7.1 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server 15 SP1-LTSS SUSE Linux Enterprise Server 15 SP2-LTSS SUSE Linux Enterprise Server 15 SP3-LTSS SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Server for SAP Applications 15 SP1 SUSE Linux Enterprise Server for SAP Applications 15 SP2 SUSE Linux Enterprise Server for SAP Applications 15 SP3 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP4 SUSE Linux Enterprise Module for Containers 15 SP4 openSUSE Leap 15.5 openSUSE Tumbleweed kubernetes kubernetes-client kubernetes-common kubernetes-kubeadm kubernetes-kubelet kubernetes1.18 kubernetes1.18-client kubernetes1.18-client-common kubernetes1.23 kubernetes1.23-apiserver-1.23.17-150500.3.6.1 kubernetes1.23-apiserver-1.23.17-5.1 kubernetes1.23-client kubernetes1.23-client-1.23.17-150500.3.6.1 kubernetes1.23-client-1.23.17-5.1 kubernetes1.23-client-bash-completion-1.23.17-150500.3.6.1 kubernetes1.23-client-bash-completion-1.23.17-5.1 kubernetes1.23-client-common kubernetes1.23-client-common-1.23.17-150500.3.6.1 kubernetes1.23-client-common-1.23.17-5.1 kubernetes1.23-client-fish-completion-1.23.17-150500.3.6.1 kubernetes1.23-client-fish-completion-1.23.17-5.1 kubernetes1.23-controller-manager-1.23.17-150500.3.6.1 kubernetes1.23-controller-manager-1.23.17-5.1 kubernetes1.23-kubeadm-1.23.17-150500.3.6.1 kubernetes1.23-kubeadm-1.23.17-5.1 kubernetes1.23-kubelet-1.23.17-150500.3.6.1 kubernetes1.23-kubelet-1.23.17-5.1 kubernetes1.23-kubelet-common-1.23.17-150500.3.6.1 kubernetes1.23-kubelet-common-1.23.17-5.1 kubernetes1.23-proxy-1.23.17-150500.3.6.1 kubernetes1.23-proxy-1.23.17-5.1 kubernetes1.23-scheduler-1.23.17-150500.3.6.1 kubernetes1.23-scheduler-1.23.17-5.1 kubernetes1.24 kubernetes1.24-client kubernetes1.24-client-common kubernetes1.23-client-1.23.17-150500.3.6.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.23-client-common-1.23.17-150500.3.6.1 as a component of SUSE Linux Enterprise Module for Containers 15 SP5 kubernetes1.23-apiserver-1.23.17-150500.3.6.1 as a component of openSUSE Leap 15.5 kubernetes1.23-client-1.23.17-150500.3.6.1 as a component of openSUSE Leap 15.5 kubernetes1.23-client-bash-completion-1.23.17-150500.3.6.1 as a component of openSUSE Leap 15.5 kubernetes1.23-client-common-1.23.17-150500.3.6.1 as a component of openSUSE Leap 15.5 kubernetes1.23-client-fish-completion-1.23.17-150500.3.6.1 as a component of openSUSE Leap 15.5 kubernetes1.23-controller-manager-1.23.17-150500.3.6.1 as a component of openSUSE Leap 15.5 kubernetes1.23-kubeadm-1.23.17-150500.3.6.1 as a component of openSUSE Leap 15.5 kubernetes1.23-kubelet-1.23.17-150500.3.6.1 as a component of openSUSE Leap 15.5 kubernetes1.23-kubelet-common-1.23.17-150500.3.6.1 as a component of openSUSE Leap 15.5 kubernetes1.23-proxy-1.23.17-150500.3.6.1 as a component of openSUSE Leap 15.5 kubernetes1.23-scheduler-1.23.17-150500.3.6.1 as a component of openSUSE Leap 15.5 kubernetes1.23-apiserver-1.23.17-5.1 as a component of openSUSE Tumbleweed kubernetes1.23-client-1.23.17-5.1 as a component of openSUSE Tumbleweed kubernetes1.23-client-bash-completion-1.23.17-5.1 as a component of openSUSE Tumbleweed kubernetes1.23-client-common-1.23.17-5.1 as a component of openSUSE Tumbleweed kubernetes1.23-client-fish-completion-1.23.17-5.1 as a component of openSUSE Tumbleweed kubernetes1.23-controller-manager-1.23.17-5.1 as a component of openSUSE Tumbleweed kubernetes1.23-kubeadm-1.23.17-5.1 as a component of openSUSE Tumbleweed kubernetes1.23-kubelet-1.23.17-5.1 as a component of openSUSE Tumbleweed kubernetes1.23-kubelet-common-1.23.17-5.1 as a component of openSUSE Tumbleweed kubernetes1.23-proxy-1.23.17-5.1 as a component of openSUSE Tumbleweed kubernetes1.23-scheduler-1.23.17-5.1 as a component of openSUSE Tumbleweed kubernetes-client as a component of SUSE CaaS Platform 4.0 kubernetes-common as a component of SUSE CaaS Platform 4.0 kubernetes-kubeadm as a component of SUSE CaaS Platform 4.0 kubernetes-kubelet as a component of SUSE CaaS Platform 4.0 kubernetes as a component of SUSE CaaS Platform 4.0 kubernetes1.18 as a component of SUSE Enterprise Storage 7 kubernetes1.18-client as a component of SUSE Enterprise Storage 7.1 kubernetes1.18-client-common as a component of SUSE Enterprise Storage 7.1 kubernetes1.18 as a component of SUSE Enterprise Storage 7.1 kubernetes1.23-client as a component of SUSE Enterprise Storage 7.1 kubernetes1.23-client-common as a component of SUSE Enterprise Storage 7.1 kubernetes1.23 as a component of SUSE Enterprise Storage 7.1 kubernetes1.24-client as a component of SUSE Enterprise Storage 7.1 kubernetes1.24-client-common as a component of SUSE Enterprise Storage 7.1 kubernetes1.24 as a component of SUSE Enterprise Storage 7.1 kubernetes-client as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS kubernetes-common as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS kubernetes as a component of SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS kubernetes1.18-client as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kubernetes1.18-client-common as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kubernetes1.18 as a component of SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS kubernetes1.18-client as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kubernetes1.18-client-common as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kubernetes1.18 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kubernetes1.23-client as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kubernetes1.23-client-common as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kubernetes1.23 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kubernetes1.24-client as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kubernetes1.24-client-common as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kubernetes1.24 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS kubernetes1.18-client as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kubernetes1.18-client-common as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kubernetes1.18 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kubernetes1.23-client as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kubernetes1.23-client-common as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kubernetes1.23 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kubernetes1.24-client as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kubernetes1.24-client-common as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kubernetes1.24 as a component of SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS kubernetes1.18-client as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.18-client-common as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.18 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.23-client as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.23-client-common as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.23 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.24-client as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.24-client-common as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes1.24 as a component of SUSE Linux Enterprise Module for Containers 15 SP4 kubernetes-client as a component of SUSE Linux Enterprise Module for Public Cloud 12 kubernetes as a component of SUSE Linux Enterprise Module for Public Cloud 12 kubernetes-client as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kubernetes-common as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kubernetes as a component of SUSE Linux Enterprise Server 15 SP1-LTSS kubernetes1.18-client as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kubernetes1.18-client-common as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kubernetes1.18 as a component of SUSE Linux Enterprise Server 15 SP2-LTSS kubernetes1.18-client as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kubernetes1.18-client-common as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kubernetes1.18 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kubernetes1.23-client as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kubernetes1.23-client-common as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kubernetes1.23 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kubernetes1.24-client as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kubernetes1.24-client-common as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kubernetes1.24 as a component of SUSE Linux Enterprise Server 15 SP3-LTSS kubernetes-client as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 kubernetes-common as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 kubernetes as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP1 kubernetes1.18-client as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 kubernetes1.18-client-common as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 kubernetes1.18 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP2 kubernetes1.18-client as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kubernetes1.18-client-common as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kubernetes1.18 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kubernetes1.23-client as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kubernetes1.23-client-common as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kubernetes1.23 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kubernetes1.24-client as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kubernetes1.24-client-common as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 kubernetes1.24 as a component of SUSE Linux Enterprise Server for SAP Applications 15 SP3 A security issue was discovered in Kubelet that allows pods to bypass the seccomp profile enforcement. Pods that use localhost type for seccomp profile but specify an empty profile field, are affected by this issue. In this scenario, this vulnerability allows the pod to run in unconfined (seccomp disabled) mode. This bug affects Kubelet. CVE-2023-2431 SUSE Linux Enterprise Module for Containers 15 SP5:kubernetes1.23-client-1.23.17-150500.3.6.1 SUSE Linux Enterprise Module for Containers 15 SP5:kubernetes1.23-client-common-1.23.17-150500.3.6.1 openSUSE Leap 15.5:kubernetes1.23-apiserver-1.23.17-150500.3.6.1 openSUSE Leap 15.5:kubernetes1.23-client-1.23.17-150500.3.6.1 openSUSE Leap 15.5:kubernetes1.23-client-bash-completion-1.23.17-150500.3.6.1 openSUSE Leap 15.5:kubernetes1.23-client-common-1.23.17-150500.3.6.1 openSUSE Leap 15.5:kubernetes1.23-client-fish-completion-1.23.17-150500.3.6.1 openSUSE Leap 15.5:kubernetes1.23-controller-manager-1.23.17-150500.3.6.1 openSUSE Leap 15.5:kubernetes1.23-kubeadm-1.23.17-150500.3.6.1 openSUSE Leap 15.5:kubernetes1.23-kubelet-1.23.17-150500.3.6.1 openSUSE Leap 15.5:kubernetes1.23-kubelet-common-1.23.17-150500.3.6.1 openSUSE Leap 15.5:kubernetes1.23-proxy-1.23.17-150500.3.6.1 openSUSE Leap 15.5:kubernetes1.23-scheduler-1.23.17-150500.3.6.1 openSUSE Tumbleweed:kubernetes1.23-apiserver-1.23.17-5.1 openSUSE Tumbleweed:kubernetes1.23-client-1.23.17-5.1 openSUSE Tumbleweed:kubernetes1.23-client-bash-completion-1.23.17-5.1 openSUSE Tumbleweed:kubernetes1.23-client-common-1.23.17-5.1 openSUSE Tumbleweed:kubernetes1.23-client-fish-completion-1.23.17-5.1 openSUSE Tumbleweed:kubernetes1.23-controller-manager-1.23.17-5.1 openSUSE Tumbleweed:kubernetes1.23-kubeadm-1.23.17-5.1 openSUSE Tumbleweed:kubernetes1.23-kubelet-1.23.17-5.1 openSUSE Tumbleweed:kubernetes1.23-kubelet-common-1.23.17-5.1 openSUSE Tumbleweed:kubernetes1.23-proxy-1.23.17-5.1 openSUSE Tumbleweed:kubernetes1.23-scheduler-1.23.17-5.1 SUSE CaaS Platform 4.0:kubernetes SUSE CaaS Platform 4.0:kubernetes-client SUSE CaaS Platform 4.0:kubernetes-common SUSE CaaS Platform 4.0:kubernetes-kubeadm SUSE CaaS Platform 4.0:kubernetes-kubelet SUSE Enterprise Storage 7.1:kubernetes1.18 SUSE Enterprise Storage 7.1:kubernetes1.18-client SUSE Enterprise Storage 7.1:kubernetes1.18-client-common SUSE Enterprise Storage 7.1:kubernetes1.23 SUSE Enterprise Storage 7.1:kubernetes1.23-client SUSE Enterprise Storage 7.1:kubernetes1.23-client-common SUSE Enterprise Storage 7.1:kubernetes1.24 SUSE Enterprise Storage 7.1:kubernetes1.24-client SUSE Enterprise Storage 7.1:kubernetes1.24-client-common SUSE Enterprise Storage 7:kubernetes1.18 SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kubernetes SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kubernetes-client SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS:kubernetes-common SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kubernetes1.18 SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kubernetes1.18-client SUSE Linux Enterprise High Performance Computing 15 SP2-LTSS:kubernetes1.18-client-common SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:kubernetes1.18 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:kubernetes1.18-client SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:kubernetes1.18-client-common SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:kubernetes1.23 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:kubernetes1.23-client SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:kubernetes1.23-client-common SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:kubernetes1.24 SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:kubernetes1.24-client SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS:kubernetes1.24-client-common SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kubernetes1.18 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kubernetes1.18-client SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kubernetes1.18-client-common SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kubernetes1.23 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kubernetes1.23-client SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kubernetes1.23-client-common SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kubernetes1.24 SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kubernetes1.24-client SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS:kubernetes1.24-client-common SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.18 SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.18-client SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.18-client-common SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.23 SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.23-client SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.23-client-common SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.24 SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.24-client SUSE Linux Enterprise Module for Containers 15 SP4:kubernetes1.24-client-common SUSE Linux Enterprise Module for Public Cloud 12:kubernetes SUSE Linux Enterprise Module for Public Cloud 12:kubernetes-client SUSE Linux Enterprise Server 15 SP1-LTSS:kubernetes SUSE Linux Enterprise Server 15 SP1-LTSS:kubernetes-client SUSE Linux Enterprise Server 15 SP1-LTSS:kubernetes-common SUSE Linux Enterprise Server 15 SP2-LTSS:kubernetes1.18 SUSE Linux Enterprise Server 15 SP2-LTSS:kubernetes1.18-client SUSE Linux Enterprise Server 15 SP2-LTSS:kubernetes1.18-client-common SUSE Linux Enterprise Server 15 SP3-LTSS:kubernetes1.18 SUSE Linux Enterprise Server 15 SP3-LTSS:kubernetes1.18-client SUSE Linux Enterprise Server 15 SP3-LTSS:kubernetes1.18-client-common SUSE Linux Enterprise Server 15 SP3-LTSS:kubernetes1.23 SUSE Linux Enterprise Server 15 SP3-LTSS:kubernetes1.23-client SUSE Linux Enterprise Server 15 SP3-LTSS:kubernetes1.23-client-common SUSE Linux Enterprise Server 15 SP3-LTSS:kubernetes1.24 SUSE Linux Enterprise Server 15 SP3-LTSS:kubernetes1.24-client SUSE Linux Enterprise Server 15 SP3-LTSS:kubernetes1.24-client-common SUSE Linux Enterprise Server for SAP Applications 15 SP1:kubernetes SUSE Linux Enterprise Server for SAP Applications 15 SP1:kubernetes-client SUSE Linux Enterprise Server for SAP Applications 15 SP1:kubernetes-common SUSE Linux Enterprise Server for SAP Applications 15 SP2:kubernetes1.18 SUSE Linux Enterprise Server for SAP Applications 15 SP2:kubernetes1.18-client SUSE Linux Enterprise Server for SAP Applications 15 SP2:kubernetes1.18-client-common SUSE Linux Enterprise Server for SAP Applications 15 SP3:kubernetes1.18 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kubernetes1.18-client SUSE Linux Enterprise Server for SAP Applications 15 SP3:kubernetes1.18-client-common SUSE Linux Enterprise Server for SAP Applications 15 SP3:kubernetes1.23 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kubernetes1.23-client SUSE Linux Enterprise Server for SAP Applications 15 SP3:kubernetes1.23-client-common SUSE Linux Enterprise Server for SAP Applications 15 SP3:kubernetes1.24 SUSE Linux Enterprise Server for SAP Applications 15 SP3:kubernetes1.24-client SUSE Linux Enterprise Server for SAP Applications 15 SP3:kubernetes1.24-client-common low 3.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N