CVE-2023-3893 Kubernetes - csi-proxy - Insufficient input sanitization leads to privilege escalation
A user creating pods on Windows nodes can escalate to admin privileges due to insufficient input sanitization in csi-proxy.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2023-3893?
CVE-2023-3893 is a high-severity vulnerability in Kubernetes csi-proxy, published on 3 Nov 2023. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes running kubernetes-csi-proxy may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes running kubernetes-csi-proxy.
Weakness: CWE-20
Which versions are affected by CVE-2023-3893?
10 open source packages ship an affected version, including github.com/kubernetes-csi/csi-proxy and github.com/kubernetes-csi/csi-proxy/v2. It affects 1 product.
| Package | Affected | Fixed in |
|---|---|---|
github.com/kubernetes-csi/csi-proxy Go | All versions | 0.0.0-20230821192013-2523e6674ded |
github.com/kubernetes-csi/csi-proxy Go | All versions | 0.0.0-20230821192013-2523e6674ded |
github.com/kubernetes-csi/csi-proxy Go | All versions | 1.1.3 |
github.com/kubernetes-csi/csi-proxy Go | From 0.1.0-rc1 | 1.1.3 |
github.com/kubernetes-csi/csi-proxy Go | From 0.1.0-rc1 | 1.1.3 |
github.com/kubernetes-csi/csi-proxy Go | From 1.1.3-0 | 1.1.3-0.20230821192013-2523e6674ded |
4 more packages
github.com/kubernetes-csi/csi-proxy Go | From 1.1.3-0 | 1.1.3-0.20230821192013-2523e6674ded |
github.com/kubernetes-csi/csi-proxy/v2 Go | From 2.0.0-alpha.0 | 2.0.0-alpha.1 |
github.com/kubernetes-csi/csi-proxy/v2 Go | From 2.0.0-alpha.0 | 2.0.0-alpha.1 |
github.com/kubernetes-csi/csi-proxy/v2 Go | From 2.0.0-alpha.0 | 2.0.0-alpha.1 |
Products include Kubernetes Csi Proxy.
How do I fix CVE-2023-3893?
Upgrade github.com/kubernetes-csi/csi-proxy to a fixed version for your release line: 0.0.0-20230821192013-2523e6674ded, 1.1.3 or 1.1.3-0.20230821192013-2523e6674ded.
Is CVE-2023-3893 being exploited?
There is no known exploitation of CVE-2023-3893 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2023-3893, GHSA-r6cc-7wj7-gfx2, GO-2023-2176.