Kubernetes Security Issues (CVE-2023-3676, CVE-2023-3893, CVE-2023-3893)

Publication Date: 2023/08/23 10:00 AM PDT

AWS is aware of three security issues (CVE-2023-3676, CVE-2023-3893, CVE-2023-3893) in Kubernetes that affect Amazon EKS customers with Windows EC2 nodes in their clusters. These issues do not affect any Kubernetes control plane or the service itself, nor do these issues permit cross-customer impact. Updated Amazon EKS Windows AMIs are now available for Kubernetes versions 1.23 through 1.27 that include patched builds of kubelet and csi-proxy. We recommend that EKS customers update their configurations …

amazon amazon eks aware aws clusters control customer customers cve ec2 eks impact kubernetes kubernetes security nodes plane security security issues service windows