CVE-2023-3955 : A security issue was discovered in Kubernetes where a user that can create pods

A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes.

Published 2023-10-31 21:15:09

Updated 2023-12-21 22:15:14

Source Kubernetes

View at NVD, CVE.org

Vulnerability category: Input validation

Products affected by CVE-2023-3955

Kubernetes » Kubernetes
Versions from including (>=) 1.27.0 and before (<) 1.27.5
cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Kubernetes » Kubernetes
Versions from including (>=) 1.25.0 and before (<) 1.25.13
cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Kubernetes » Kubernetes
Versions from including (>=) 1.26.0 and before (<) 1.26.8
cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Kubernetes » Kubernetes
Versions from including (>=) 1.28.0 and before (<) 1.28.1
cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A
Kubernetes » Kubernetes
Versions before (<) 1.24.17
cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2023-3955

EPSS FAQ

0.09%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 38 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2023-3955

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	2.8	5.9	Kubernetes
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H	2.8	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2023-3955

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
Assigned by:
- jordan@liggitt.net (Secondary)
- nvd@nist.gov (Primary)

References for CVE-2023-3955

https://groups.google.com/g/kubernetes-security-announce/c/JrX4bb7d83E

[Security Advisory] CVE-2023-3955: Insufficient input sanitization on Windows nodes leads to privilege escalation
Technical Description
https://security.netapp.com/advisory/ntap-20231221-0002/

CVE-2023-3955 Kubernetes Vulnerability in NetApp Products | NetApp Product Security
https://github.com/kubernetes/kubernetes/issues/119595

CVE-2023-3955: Insufficient input sanitization on Windows nodes leads to privilege escalation · Issue #119595 · kubernetes/kubernetes · GitHub
Exploit;Mitigation;Patch;Third Party Advisory

Jump to

Vulnerability Details : CVE-2023-3955

Products affected by CVE-2023-3955

Exploit prediction scoring system (EPSS) score for CVE-2023-3955

CVSS scores for CVE-2023-3955

CWE ids for CVE-2023-3955

References for CVE-2023-3955