Import Source
https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-53528.json
JSON Data
https://api.test.osv.dev/v1/vulns/AZL-53528
Upstream
Published
2024-11-22T17:15:06Z
Modified
2026-04-01T05:18:04.878937Z
Summary
CVE-2024-10220 affecting package kubernetes for versions less than 1.30.3-1
Details

The Kubernetes kubelet component allows arbitrary command execution via specially crafted gitRepo volumes.This issue affects kubelet: through 1.28.11, from 1.29.0 through 1.29.6, from 1.30.0 through 1.30.2.

References

Affected packages

Azure Linux:3 / kubernetes

Package

Name
kubernetes
Purl
pkg:rpm/azure-linux/kubernetes

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.30.3-1

Database specific

source
"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-53528.json"