CVE-2023-42816

Summary

CVE-2023-42816 is a newly discovered denial-of-service vulnerability in Kyverno, a Kubernetes policy engine. The issue lies in Kyverno's Notary verifier, allowing an attacker with control over the registry to return malicious responses, causing Kyverno to become unresponsive and blocking the processing of admission requests for other users. This vulnerability affects only those users who build Kyverno from the main branch, as official releases are untouched. No known exploits have been reported in the wild.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.