The Birthday attack against 64-bit block ciphers flaw (CVE-2016-2183) was reported for the health checks port (9979) on etcd grpc-proxy component. Even though the CVE-2016-2183 has been fixed in the etcd components, to enable periodic health checks from kubelet, it was necessary to open up a new port (9979) on etcd grpc-proxy, hence this port might be considered as still vulnerable to the same type of vulnerability. The health checks on etcd grpc-proxy do not contain sensitive data (only metrics data), therefore the potential impact related to this vulnerability is minimal. The CVE-2023-0296 has been assigned to this issue to track the permanent fix in the etcd component.

photon_os PHSA-2023-3.0-0631: Unknown PhotonOS Security Updated

photon_os PHSA-2023-3.0-0608: Unknown PhotonOS Security Updated

photon_os PHSA-2023-3.0-0606: Unknown PhotonOS Security Updated

photon_os PHSA-2023-4.0-0427: Unknown PhotonOS Security Updated

photon_os PHSA-2023-5.0-0043: Unknown PhotonOS Security Updated

photon_os PHSA-2023-5.0-0045: Unknown PhotonOS Security Updated

photon_os PHSA-2023-4.0-0420: Unknown PhotonOS Security Updated

An update of the nginx package has been released.

An update of the coredns package has been released.

An update of the calico package has been released.

An update of the kubernetes package has been released.

ID	Name	Product	Family	Severity
203967	Photon OS 3.0: Nginx PHSA-2023-3.0-0606	Nessus	PhotonOS Local Security Checks	medium
203868	Photon OS 3.0: Coredns PHSA-2023-3.0-0608	Nessus	PhotonOS Local Security Checks	high
203810	Photon OS 3.0: Calico PHSA-2023-3.0-0631	Nessus	PhotonOS Local Security Checks	critical
203746	Photon OS 3.0: Kubernetes PHSA-2023-3.0-0631	Nessus	PhotonOS Local Security Checks	critical
203647	Photon OS 5.0: Kubernetes PHSA-2023-5.0-0049	Nessus	PhotonOS Local Security Checks	critical
203562	Photon OS 5.0: Calico PHSA-2023-5.0-0049	Nessus	PhotonOS Local Security Checks	critical

Detections

Analytics

CVE-2023-0296

medium

Tenable Plugins

Coming Soon

medium

high

critical

critical

critical

critical