CVE-2023-42816

描述

Denial of service from malicious signature in kyverno in github.com/kyverno/kyverno

如何修補 CVE-2023-42816

要修補 CVE-2023-42816,請將受影響套件升級到下列已修補版本。

• Go/github.com/kyverno/kyverno—升級至 1.5.0-rc1.0.20230918070231-fec2992e3f9f 或更新版本

CVE-2023-42816 正在被利用嗎?

低 — EPSS 為 0.5%,目前沒有觀察到大規模利用活動。

受影響套件(1)

• >= 1.5.0-rc1.0.20230601080528-80d139bb5d1d, < 1.5.0-rc1.0.20230918070231-fec2992e3f9f

參考連結(5)

• ADVISORYgithub.com/kyverno/kyverno/security/advisories/GHSA-4mp4-46gq-hv3r
• ADVISORYnvd.nist.gov/vuln/detail/CVE-2023-42816
• PATCHgithub.com/kyverno/kyverno/commit/80d139bb5d1d9d7e907abe851b97dc73821a5be2
• PATCHgithub.com/kyverno/kyverno/commit/fec2992e3f9fcd6b9c62267522c09b182e7df73b