CVSS 3.1
5.9 mediumCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:NCVE-2024-9042
Medium (5.9). EPSS 1.4% chance of exploitation in the next 30 days. Fixed in k8s.io/kubernetes 1.29.13, 1.30.9, 1.31.5.
This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.
Severity
- EPSS
- 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
- CWE
- CWE-20
- Published
- Modified
- Record from
- the NVD, synced
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-vv39-3w5q-974q | Go | k8s.io/kubernetes | <1.29.13 | 1.29.13 |
| GHSA-vv39-3w5q-974q | Go | k8s.io/kubernetes | >=1.30.0-alpha.0 <1.30.9 | 1.30.9 |
| GHSA-vv39-3w5q-974q | Go | k8s.io/kubernetes | >=1.31.0-alpha.0 <1.31.5 | 1.31.5 |
| GHSA-vv39-3w5q-974q | Go | k8s.io/kubernetes | >=1.32.0-alpha.0 <1.32.1 | 1.32.1 |
| GO-2025-3522 | Go | k8s.io/kubernetes | <1.29.13 >=1.30.0-alpha.0 <1.30.9 >=1.31.0-alpha.0 <1.31.5 >=1.32.0-alpha.0 <1.32.1 | 1.29.13, 1.30.9, 1.31.5, 1.32.1 |