CVE-2024-9042

State: Published
Severity: 5.9 Medium
Published: Mar 13, 2025
Updated: Mar 13, 2025
Reserved: Sep 20, 2024

Description

This CVE affects only Windows worker nodes. Your worker node is vulnerable to this issue if it is running one of the affected versions listed below.

Scores

CVSS	Score	Vector	Source
3.1	5.9 Medium	CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N	kubernetes

Weaknesses

CWE-20 Improper Input Validation

Affected Products

Product	Versions
KubeletKubernetes	<=v1.29.12Affected v1.30 through v1.30.8Affected v1.31 through v1.31.4Affected v1.32 through v1.32.0Affected

References

https://github.com/kubernetes/kubernetes/issues/129654
https://groups.google.com/g/kubernetes-security-announce/c/9C3vn6aCSVg
http://www.openwall.com/lists/oss-security/2025/01/16/1

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.