CVE-2023-5528 | allinfosecnews.com

Nov. 14, 2023, 7:37 p.m. | aws@amazon.com

Latest Bulletins aws.amazon.com

Publication Date: 2023/11/14 11:30 AM PDT

AWS is aware of CVE-2023-5528, an issue in Kubernetes. Amazon EKS optimized Windows AMIs are not affected by the issue because the Kubernetes local-storage storage class type is disabled on EKS Windows AMI.

As a security best practice, we recommend that EKS customers update their configurations to launch new worker nodes from the latest AMI version. Customers using Managed node groups can upgrade their node groups by referring to the EKS documentation. Please refer …

amazon amazon eks ami aware aws best practice class customers cve disabled eks issue kubernetes launch local nodes practice security storage update windows worker

More from aws.amazon.com / Latest Bulletins

CVE-2023-23583 3 weeks, 4 days ago | aws.amazon.com

aware aws cve ec2 +10

CVE-2023-5528 3 weeks, 4 days ago | aws.amazon.com

amazon amazon eks ami aware +18

CVE-2023-44487 - HTTP/2 Rapid Reset Attack 1 month, 4 weeks ago | aws.amazon.com

2 rapid reset address attack aware +16

Issue with Amazon WorkSpaces Windows Client Version 5.9 and 5.10 2 months ago | aws.amazon.com

amazon aws characters client +12

Reported TorchServe Issue (CVE-2023-43654) 2 months, 1 week ago | aws.amazon.com

aware aws containers customers +10

Kubernetes Security Issues (CVE-2023-3676, CVE-2023-3893, CVE-2023-3893) 3 months, 2 weeks ago | aws.amazon.com

amazon amazon eks aware aws +16

CVE-2023-20569 - RAS Poisoning - Inception 4 months ago | aws.amazon.com

action amazon amazon ec2 aware +13

CVE-2022-40982 - Gather Data Sampling - Downfall 4 months ago | aws.amazon.com

action amazon amazon ec2 aware +9

Recent Software-based Power Side-Channel Security Research 4 months, 1 week ago | aws.amazon.com

action amazon amazon ec2 aware +15

Security Specialist

@ Protect Democracy | Remote, US

View on infosec-jobs.com

Environmental Compliance Lead

@ EDF Energy | Bristol, GB

View on infosec-jobs.com

IT Consultant Network w/m/d Wireless (WiFi6, Mobilfunk 5G)

@ Computacenter | Berlin, DE, 12099

View on infosec-jobs.com

Senior - Cyber Infrastructure Protection

@ Deloitte | Madrid, España

View on infosec-jobs.com

GRC (Governance, Risk & Compliance) | 4 to 6 Years | Mumbai, Bengaluru & Chennai

@ Capgemini | Bengaluru, MH, IN

View on infosec-jobs.com

Technology Risk & Controls Advisory - Experienced Consultant

@ Wavestone | London, United Kingdom

View on infosec-jobs.com