Source |
Vuln GCP |
Identifiant |
8296080 |
Date de publication |
2022-12-21 17:12:56 (vue: 2022-12-30 21:12:37) |
Titre |
GCP-2022-022 (Recyclage) |
Texte |
Published: 2022-10-28Updated: 2022-12-14Description
Description
Severity
Notes
2022-12-14 Update: Added patch versions for GKE and Anthos clusters on VMware. A new vulnerability, CVE-2022-20409, has been discovered in the Linux kernel that could allow an unprivileged user to escalate to system execution privilege. For instructions and more details, see the following bulletins: GKE security bulletin
Anthos clusters on VMware security bulletin
Anthos clusters on AWS security bulletin
Anthos on Azure security bulletin
Anthos on bare metal security bulletin
High
CVE-2022-20409
|
Notes |
★★★
|
Envoyé |
Oui |
Condensat |
022 14description 2022 20409 28updated: added allow and anthos aws azure bare been bulletin bulletins: clusters could cve description details discovered escalate execution following for gcp gke has high instructions kernel linux metal more new notes patch privilege published: security see severity system that the unprivileged update: user versions vmware vulnerability |
Tags |
|
Stories |
|
Move |
|
Source |
Vuln GCP |
Identifiant |
8296077 |
Date de publication |
2022-12-21 17:12:56 (vue: 2022-12-30 21:12:37) |
Titre |
GCP-2022-025 (Recyclage) |
Texte |
Published: 2022-12-21Description
Description
Severity
Notes
A new vulnerability (CVE-2022-2602) has been discovered in the io_uring subsystem in the Linux kernel that can allow an attacker to potentially execute arbitrary code. For instructions and more details, see the following bulletins: GKE security bulletin
Anthos clusters on VMware security bulletin
Anthos clusters on AWS security bulletin
Anthos on Azure security bulletin
Anthos on bare metal security bulletin
High
CVE-2022-2602
|
Notes |
★★★
|
Envoyé |
Oui |
Condensat |
025 2022 21description 2602 allow and anthos arbitrary attacker aws azure bare been bulletin bulletins: can clusters code cve description details discovered execute following for gcp gke has high instructions kernel linux metal more new notes potentially published: security see severity subsystem that the uring vmware vulnerability |
Tags |
Vulnerability
|
Stories |
|
Move |
|
Src |
Date (GMT) |
Titre |
Description |
Tags |
Stories |
Notes |
 |
2022-12-21 17:12:56 |
(Déjà vu) GCP-2022-025 (lien direct) |
Published: 2022-12-21Description
Description
Severity
Notes
A new vulnerability (CVE-2022-2602) has been discovered in the io_uring subsystem in the Linux kernel that can allow an attacker to potentially execute arbitrary code. For instructions and more details, see the following bulletins: GKE security bulletin
Anthos clusters on VMware security bulletin
Anthos clusters on AWS security bulletin
Anthos on Azure security bulletin
Anthos on bare metal security bulletin
High
CVE-2022-2602
|
Vulnerability
|
|
★★★
|
 |
2023-03-01 20:25:32 |
(Déjà vu) GCP-2023-001 (lien direct) |
Published: 2023-03-01Description
Description
Severity
Notes
A new vulnerability (CVE-2022-4696) has been discovered in the Linux kernel that can lead to a privilege escalation on the node. For instructions and more details, see the following bulletins: GKE security bulletin
Anthos clusters on VMware security bulletin
Anthos clusters on AWS security bulletin
Anthos on Azure security bulletin
Anthos on bare metal security bulletin
High
CVE-2022-4696
|
Vulnerability
Guideline
|
|
★★★
|