The Birthday attack against 64-bit block ciphers flaw (CVE-2016-2183) was reported for the health checks port (9979) on etcd grpc-proxy component. Even though the CVE-2016-2183 has been fixed in the etcd components, to enable periodic health checks from kubelet, it was necessary to open up a new port (9979) on etcd grpc-proxy, hence this port might be considered as still vulnerable to the same type of vulnerability. The health checks on etcd grpc-proxy do not contain sensitive data (only metrics data), therefore the potential impact related to this vulnerability is minimal. The CVE-2023-0296 has been assigned to this issue to track the permanent fix in the etcd component.

An update of the coredns package has been released.

An update of the kubernetes package has been released.

An update of the calico package has been released.

An update of the flannel package has been released.

An update of the nginx package has been released.

ID	Name	Product	Family	Severity
204479	Photon OS 4.0: Coredns PHSA-2023-4.0-0420	Nessus	PhotonOS Local Security Checks	high
204440	Photon OS 4.0: Kubernetes PHSA-2023-4.0-0427	Nessus	PhotonOS Local Security Checks	critical
204433	Photon OS 4.0: Calico PHSA-2023-4.0-0427	Nessus	PhotonOS Local Security Checks	critical
204397	Photon OS 4.0: Flannel PHSA-2023-4.0-0427	Nessus	PhotonOS Local Security Checks	critical
204171	Photon OS 5.0: Kubernetes PHSA-2023-5.0-0043	Nessus	PhotonOS Local Security Checks	critical
204146	Photon OS 5.0: Coredns PHSA-2023-5.0-0045	Nessus	PhotonOS Local Security Checks	medium
203967	Photon OS 3.0: Nginx PHSA-2023-3.0-0606	Nessus	PhotonOS Local Security Checks	medium
203868	Photon OS 3.0: Coredns PHSA-2023-3.0-0608	Nessus	PhotonOS Local Security Checks	high
203810	Photon OS 3.0: Calico PHSA-2023-3.0-0631	Nessus	PhotonOS Local Security Checks	critical
203746	Photon OS 3.0: Kubernetes PHSA-2023-3.0-0631	Nessus	PhotonOS Local Security Checks	critical
203647	Photon OS 5.0: Kubernetes PHSA-2023-5.0-0049	Nessus	PhotonOS Local Security Checks	critical
203562	Photon OS 5.0: Calico PHSA-2023-5.0-0049	Nessus	PhotonOS Local Security Checks	critical

Detections

Analytics

CVE-2023-0296

medium

Tenable Plugins

high

critical

critical

critical

critical

medium

medium

high

critical

critical

critical

critical