CVE-2023-1297 Affecting k3d package, versions <5.6.0-r11


Severity

Recommended
0.0
high
0
10

Snyk's Security Team recommends NVD's CVSS assessment. Learn more

Threat Intelligence

EPSS
0.09% (39th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk IDSNYK-WOLFILATEST-K3D-6593475
  • published9 Apr 2024
  • disclosed2 Jun 2023

Introduced: 2 Jun 2023

CVE-2023-1297  (opens in a new tab)

How to fix?

Upgrade Wolfi k3d to version 5.6.0-r11 or higher.

NVD Description

Note: Versions mentioned in the description apply only to the upstream k3d package and not the k3d package as distributed by Wolfi. See How to fix? for Wolfi relevant fixed versions and status.

Consul and Consul Enterprise's cluster peering implementation contained a flaw whereby a peer cluster with service of the same name as a local service could corrupt Consul state, resulting in denial of service. This vulnerability was resolved in Consul 1.14.5, and 1.15.3

CVSS Scores

version 3.1