CVE-2024-3177

Publication date 22 April 2024

Last updated 24 July 2024

Ubuntu priority

Medium

Why this priority?

A security issue was discovered in Kubernetes where users may be able to launch containers that bypass the mountable secrets policy enforced by the ServiceAccount admission plugin when using containers, init containers, and ephemeral containers with the envFrom field populated. The policy ensures pods running with a service account may only reference secrets specified in the service account’s secrets field. Kubernetes clusters are only affected if the ServiceAccount admission plugin and the kubernetes.io/enforce-mountable-secrets annotation are used together with containers, init containers, and ephemeral containers with the envFrom field populated.

Read the notes from the security team

Status

Package Ubuntu Release Status
kubernetes 25.04 plucky Not in release
24.10 oracular
Needs evaluation
24.04 LTS noble
Needs evaluation
23.10 mantic Ignored end of life, was needs-triage
22.04 LTS jammy
Needs evaluation
20.04 LTS focal
Needs evaluation

Notes

leosilva

kubernates is in fact a kubernetes installer that calls snap, not the package it self.