CVE-2021-25749
Fixed in a distro release EPSS <1%CVSS 7.8
Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true.
Products: Kubernetes
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | kube-apiserver-1.20 | 0 |
| Chainguard | kube-controller-manager-1.20 | 0 |
| Chainguard | kube-proxy-1.20 | 0 |
| Chainguard | kube-scheduler-1.20 | 0 |
| Chainguard | kubeadm-1.20 | 0 |
| Chainguard | kubectl-1.20 | 0 |
| Chainguard | kubectl-bash-completion-1.20 | 0 |
| Chainguard | kubelet-1.20 | 0 |
| Chainguard | kubernetes-1.20 | 0 |
| Chainguard | kubernetes-1.20-default | 0 |
| Chainguard | kubernetes-pause-3.4 | 0 |
| SUSE Enterprise Storage 7.1 | kubernetes1.23 | 1.23.17-150300.7.6.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOS | kubernetes1.23 | 1.23.17-150300.7.6.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | kubernetes1.23 | 1.23.17-150300.7.6.1 |
| SUSE Linux Enterprise Module for Containers 15 SP4 | kubernetes1.23 | 1.23.17-150300.7.6.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | kubernetes1.23 | 1.23.17-150300.7.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | kubernetes1.23 | 1.23.17-150300.7.6.1 |