← Packages
kubernetes
Production-grade container orchestration system
- Current
- 1.35.5
- Candidate
- 1.37.2Stale
- License
- Apache-2.0
- BuildSystem
- ❔ custom
Advisory · 1
Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.
- Summary
- Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.externalIPs field, to intercept traffic to that IP address. Additionally, an attacker who is able to patch the status (which is considered a privileged operation and should not typically be granted to users) of a LoadBalancer service can set the status.loadBalancer.ingress.ip to similar effect.NVD
- EPSS model date
- 2026-11-10FIRST
- EPSS probability
- 8.72%FIRST
- Vulnerable CPE criteria
- cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*NVD
- Aliases
- —NVD
- KEV
- NoCISA
- CVSS_V2
- AV:N/AC:M/Au:S/C:P/I:P/A:PNVD
- CVSS_V3
- CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:LNVD
- CVSS_V3
- CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LNVD
Description
Kubernetes is a system for automating deployment, scaling, and management of containerized applications. This package provides the core node, client, and control-plane binaries used by kubeadm and manually managed clusters.
Changelog
PR · 6
Checks
| Monitor | Observation | Last checked |
|---|---|---|
Stale Repository refresh: git fetch exited 128 (authentication) | ||
Stale Source last confirmed at 2026-11-10T23:09:30+00:00; repository refresh overdue. | ||
Checked | ||
Checked | ||
Checked Current source cycle 1.35; upstream lifecycle only. | ||
Not configured No reliable monitor identity/configuration. | — | |
Not configured No reliable monitor identity/configuration. | — | |
Checked Current source component only; local patches, build options, bundled dependencies and binary artifacts are not evaluated. | Last attempted | |
Not configured No reliable monitor identity/configuration. | — |