{"metadata": {"vulnerability": "cve-2023-3676", "count": 105, "kinds": {"milestone": 15, "sighting": 18, "kev": 0, "other": 72}}, "data": [{"timestamp": "2023-07-14T16:06:03.399Z", "date_only": false, "value": "2023-07-14T16:06:03.399Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2023-3676", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-07-28T00:00:00Z", "date_only": false, "value": "2023-07-28T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:4777", "record": "RHSA-2023:4777", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-07-28T00:00:00Z", "date_only": false, "value": "2023-07-28T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:4780", "record": "RHSA-2023:4780", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-07-28T00:00:00Z", "date_only": false, "value": "2023-07-28T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:4835", "record": "RHSA-2023:4835", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-07-28T00:00:00Z", "date_only": false, "value": "2023-07-28T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:4885", "record": "RHSA-2023:4885", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-07-28T00:00:00Z", "date_only": false, "value": "2023-07-28T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:7515", "record": "RHSA-2023:7515", "field": "vulnerabilities.0.discovery_date"}, {"timestamp": "2023-08-23T04:00:00Z", "date_only": false, "value": "2023-08-23T04:00:00.000Z", "kind": "other", "label": "Made public", "source": "cvelistv5 / kubernetes", "record": "cve-2023-3676", "field": "containers.cna.datePublic"}, {"timestamp": "2023-08-23T13:00:00Z", "date_only": false, "value": "2023-08-23T13:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:4777", "record": "RHSA-2023:4777", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-08-23T13:00:00Z", "date_only": false, "value": "2023-08-23T13:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:4780", "record": "RHSA-2023:4780", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-08-23T13:00:00Z", "date_only": false, "value": "2023-08-23T13:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:4835", "record": "RHSA-2023:4835", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-08-23T13:00:00Z", "date_only": false, "value": "2023-08-23T13:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:4885", "record": "RHSA-2023:4885", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-08-23T13:00:00Z", "date_only": false, "value": "2023-08-23T13:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:7515", "record": "RHSA-2023:7515", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-08-23T22:00:00Z", "date_only": false, "value": "2023-08-23T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2163", "record": "WID-SEC-W-2023-2163", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-08-23T22:00:00Z", "date_only": false, "value": "2023-08-23T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2163", "record": "WID-SEC-W-2023-2163", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-08-23T22:00:00Z", "date_only": false, "value": "2023-08-23T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2163", "record": "WID-SEC-W-2023-2163", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-08-24T08:20:12Z", "date_only": false, "value": "2023-08-24T08:20:12.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/132601", "record": "CVE-2023-3676", "field": "creation_timestamp", "uuid": "941fca29-3387-42a3-a2a2-1dba42f31dcb", "content": "https://ift.tt/jOr9APR\nKubelet vulnerabilities on Windows nodes: CVE-2023-3676, CVE-2023-3955 and CVE-2023-3893", "url": "https://t.me/ctinow/132601"}, {"timestamp": "2023-08-24T22:00:00Z", "date_only": false, "value": "2023-08-24T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2163", "record": "WID-SEC-W-2023-2163", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-08-28T15:26:43Z", "date_only": false, "value": "2023-08-28T15:26:43+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:4777", "record": "RHSA-2023:4777", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-08-28T15:26:43Z", "date_only": false, "value": "2023-08-28T15:26:43+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:4777", "record": "RHSA-2023:4777", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-08-28T15:26:43Z", "date_only": false, "value": "2023-08-28T15:26:43+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:4777", "record": "RHSA-2023:4777", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-08-28T17:53:25Z", "date_only": false, "value": "2023-08-28T17:53:25+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:4780", "record": "RHSA-2023:4780", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-08-28T17:53:25Z", "date_only": false, "value": "2023-08-28T17:53:25+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:4780", "record": "RHSA-2023:4780", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-08-28T17:53:25Z", "date_only": false, "value": "2023-08-28T17:53:25+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:4780", "record": "RHSA-2023:4780", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-08-28T22:00:00Z", "date_only": false, "value": "2023-08-28T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2163", "record": "WID-SEC-W-2023-2163", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2023-08-29T09:24:51Z", "date_only": false, "value": "2023-08-29T09:24:51+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:4835", "record": "RHSA-2023:4835", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-08-29T09:24:51Z", "date_only": false, "value": "2023-08-29T09:24:51+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:4835", "record": "RHSA-2023:4835", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-08-29T09:24:51Z", "date_only": false, "value": "2023-08-29T09:24:51+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:4835", "record": "RHSA-2023:4835", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-08-29T22:00:00Z", "date_only": false, "value": "2023-08-29T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2163", "record": "WID-SEC-W-2023-2163", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2023-08-30T16:33:47Z", "date_only": false, "value": "2023-08-30T16:33:47+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:4885", "record": "RHSA-2023:4885", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-08-30T16:33:47Z", "date_only": false, "value": "2023-08-30T16:33:47+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:4885", "record": "RHSA-2023:4885", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-08-30T16:33:47Z", "date_only": false, "value": "2023-08-30T16:33:47+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:4885", "record": "RHSA-2023:4885", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-08-30T22:00:00Z", "date_only": false, "value": "2023-08-30T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2163", "record": "WID-SEC-W-2023-2163", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2023-09-13T16:55:52Z", "date_only": false, "value": "2023-09-13T16:55:52.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/KomunitiSiber/787", "record": "CVE-2023-3676", "field": "creation_timestamp", "uuid": "f1521aa6-9af7-4800-946b-2248c96e9e9c", "content": "Alert: New Kubernetes Vulnerabilities Enable Remote Attacks on Windows Endpoints\nhttps://thehackernews.com/2023/09/alert-new-kubernetes-vulnerabilities.html\n\nThree interrelated high-severity security flaws discovered in Kubernetes could be exploited to achieve remote code execution with elevated privileges on Windows endpoints within a cluster.\nThe\u00a0issues, tracked as CVE-2023-3676, CVE-2023-3893, and CVE-2023-3955, carry CVSS scores of 8.8 and impact all Kubernetes environments with Windows nodes. Fixes for the vulnerabilities were\u00a0released\u00a0on August", "url": "https://t.me/KomunitiSiber/787"}, {"timestamp": "2023-09-13T18:29:02Z", "date_only": false, "value": "2023-09-13T18:29:02.000000Z", "kind": "sighting", "label": "Seen", "source": "Telegram/Eqz54UavaIWHVUW9FJ7x8kPgHx309M56ivVEiN1xHvA_sg", "record": "CVE-2023-3676", "field": "creation_timestamp", "uuid": "aeadf5b4-dbdb-48ac-b4f7-8dee409309f6"}, {"timestamp": "2023-09-14T15:21:47Z", "date_only": false, "value": "2023-09-14T15:21:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/4847", "record": "CVE-2023-3676", "field": "creation_timestamp", "uuid": "0ff8fa25-f22e-48ce-b285-10175171f01d", "content": "\u0412 Kubernetes \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0442\u0440\u0438 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043c\u043e\u0433\u0443\u0442 \u0431\u044b\u0442\u044c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u044b \u0434\u043b\u044f RCE \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043d\u0430 \u043e\u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 Windows \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043e\u0434\u043d\u043e\u0433\u043e \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430. \n\n\u0412\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u0437\u0430\u0438\u043c\u043e\u0441\u0432\u044f\u0437\u0430\u043d\u044b \u0438 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u044e\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-3676, CVE-2023-3893 \u0438 CVE-2023-3955 \u0441 \u043e\u0446\u0435\u043d\u043a\u043e\u0439 CVSS 8.8.\n\n\u0411\u0430\u0433\u0438 \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0432\u0441\u0435 \u0441\u0440\u0435\u0434\u044b Kubernetes \u0441 \u0445\u043e\u0441\u0442\u0430\u043c\u0438 Windows, \u0430 \u0434\u043b\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043d\u0443\u0436\u043d\u043e \u043f\u0440\u0438\u043c\u0435\u043d\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0444\u0430\u0439\u043b YAML \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435.\n\nCVE-2023-3676 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 'apply' \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u0441 API Kubernetes \u0438 \u0432\u043d\u0435\u0434\u0440\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d \u043d\u0430 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u043c\u0430\u0448\u0438\u043d\u0430\u0445 Windows \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 SYSTEM.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u0442\u0430\u043a \u0436\u0435, \u043a\u0430\u043a \u0438 CVE-2023-3955, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0439 \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u0432\u0445\u043e\u0434\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0435 \u043f\u0443\u0442\u0438 \u0431\u044b\u0442\u044c \u043f\u0440\u043e\u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u044b PowerShell, \u0447\u0442\u043e \u0432 \u043a\u043e\u043d\u0435\u0447\u043d\u043e\u043c \u0438\u0442\u043e\u0433\u0435 \u043f\u0440\u0438\u0432\u043e\u0434\u0438\u0442 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n\n\u0421 \u0434\u0440\u0443\u0433\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u044b, CVE-2023-3893, \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441\u043e \u0441\u043b\u0443\u0447\u0430\u0435\u043c \u044d\u0441\u043a\u0430\u043b\u0430\u0446\u0438\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0432 \u043f\u0440\u043e\u043a\u0441\u0438-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 Container Storage Interface (CSI), \u0447\u0442\u043e \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u0437\u043b\u0443.\n\n\u0411\u0430\u0433\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b 13 \u0438\u044e\u043b\u044f 2023 \u0433\u043e\u0434\u0430 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c\u0438 Akamai, \u0430 23 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f.\n\n\u0412 Amazon Web Services, Google Cloud \u0438 Microsoft Azure \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u0441\u043e\u0432\u0435\u0442\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e \u044d\u0442\u0438\u0445 \u043e\u0448\u0438\u0431\u043e\u043a, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043b\u0438\u044f\u044e\u0442 \u043d\u0430 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 Kubelet: < v1.28.1, v1.27.5, v1.26.8, v1.25.13 \u0438 v1.24.17.", "url": "https://t.me/true_secator/4847"}, {"timestamp": "2023-09-14T16:15:58Z", "date_only": false, "value": "2023-09-14T16:15:58.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/3873", "record": "CVE-2023-3676", "field": "creation_timestamp", "uuid": "c7ad4f17-9b43-41e1-9d88-ed6d116de621", "content": "\ud83d\udea8 Critical security flaws discovered in Kubernetes could lead to remote code execution with elevated privileges on Windows endpoints within a cluster. \n \nLearn more about CVE-2023-3676, CVE-2023-3893, and CVE-2023-3955: https://thehackernews.com/2023/09/alert-new-kubernetes-vulnerabilities.html", "url": "https://t.me/thehackernews/3873"}, {"timestamp": "2023-09-14T22:00:00Z", "date_only": false, "value": "2023-09-14T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2163", "record": "WID-SEC-W-2023-2163", "field": "document.tracking.revision_history.5.date"}, {"timestamp": "2023-09-17T05:13:46Z", "date_only": false, "value": "2023-09-17T05:13:46.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysodmins/19478", "record": "CVE-2023-3676", "field": "creation_timestamp", "uuid": "d8d98f82-ea9e-41cd-bcfe-3c4cd51edb7e", "content": "\ud83d\udcbb \u041d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 Kubernetes \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434\n\n\u042d\u0442\u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 (CVE-2023-3676, CVE-2023-3893 \u0438 CVE-2023-3955) \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u0441 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043d\u0430 Windows-\u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442\u0430\u0445 \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435.\n\n\u0412\u0441\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 8,8 \u0431\u0430\u043b\u043b\u0430 \u0438\u0437 10 \u043f\u043e \u0448\u043a\u0430\u043b\u0435 CVSS. \u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b 23 \u0430\u0432\u0433\u0443\u0441\u0442\u0430.\n\n\u0422\u0430\u043a \u043a\u0430\u043a \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0431\u0430\u0433\u043e\u0432 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043d\u0438\u0437\u043a\u0438\u0445 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u0438 \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u0430, \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043c\u043e\u0436\u043d\u043e \u0441\u043a\u043e\u0440\u0435\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f. \u042d\u043a\u0441\u043f\u0435\u0440\u0442\u044b \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442, \u0447\u0442\u043e \u00ab\u0441\u0443\u0449\u0435\u0441\u0442\u0432\u0443\u0435\u0442 \u0432\u044b\u0441\u043e\u043a\u0430\u044f \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u0443\u0432\u0438\u0434\u0435\u0442\u044c, \u043a\u0430\u043a \u044d\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438\u00bb.\n\n\u0422\u0438\u043f\u0438\u0447\u043d\u044b\u0439 \ud83e\udd78 \u0421\u0438\u0441\u0430\u0434\u043c\u0438\u043d", "url": "https://t.me/sysodmins/19478"}, {"timestamp": "2023-09-18T14:37:33Z", "date_only": false, "value": "2023-09-18T14:37:33.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/137565", "record": "CVE-2023-3676", "field": "creation_timestamp", "uuid": "4b77048f-5e66-4ca0-8b20-549ec4701955", "content": "https://ift.tt/7E8X0DI\nKubernetes vulnerability allows RCE on Windows endpoints (CVE-2023-3676)", "url": "https://t.me/ctinow/137565"}, {"timestamp": "2023-09-20T09:42:43Z", "date_only": false, "value": "2023-09-20T09:42:43.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/138099", "record": "CVE-2023-3676", "field": "creation_timestamp", "uuid": "c36beec6-bf3b-438d-b06b-ac9ac95b1fc3", "content": "https://ift.tt/6fK3w5n\nKubernetes Vulnerability Allows RCE on Windows Endpoints (CVE-2023-3676)", "url": "https://t.me/ctinow/138099"}, {"timestamp": "2023-10-10T00:00:00Z", "date_only": false, "value": "2023-10-10T00:00:00+00:00", "kind": "other", "label": "Discovery date", "source": "csaf_redhat \u00b7 RHSA-2023:7515", "record": "RHSA-2023:7515", "field": "vulnerabilities.2.discovery_date"}, {"timestamp": "2023-10-10T00:00:00Z", "date_only": false, "value": "2023-10-10T00:00:00+00:00", "kind": "other", "label": "Release date", "source": "csaf_redhat \u00b7 RHSA-2023:7515", "record": "RHSA-2023:7515", "field": "vulnerabilities.2.release_date"}, {"timestamp": "2023-10-31T20:22:53.620Z", "date_only": false, "value": "2023-10-31T20:22:53.620Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2023-3676", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-10-31T21:15:00Z", "date_only": false, "value": "2023-10-31T21:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-3676", "record": "UBUNTU-CVE-2023-3676", "field": "published"}, {"timestamp": "2023-10-31T21:15:00Z", "date_only": false, "value": "2023-10-31T21:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2023-3676", "record": "GSD-2023-3676", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2023-10-31T21:15:08Z", "date_only": false, "value": "2023-10-31T21:15:08Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-7FXM-F474-HF8W", "record": "GHSA-7FXM-F474-HF8W", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-10-31T21:15:08.550Z", "date_only": false, "value": "2023-10-31T21:15:08.550", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-3676", "record": "FKIE_CVE-2023-3676", "field": "published"}, {"timestamp": "2023-10-31T21:32:35Z", "date_only": false, "value": "2023-10-31T21:32:35Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-7FXM-F474-HF8W", "record": "GHSA-7FXM-F474-HF8W", "field": "published"}, {"timestamp": "2023-10-31T23:21:09Z", "date_only": false, "value": "2023-10-31T23:21:09.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/73272", "record": "CVE-2023-3676", "field": "creation_timestamp", "uuid": "db45cbee-a418-40e2-9671-33d01bb58529", "content": "\u203c CVE-2023-3676 \u203c\n\nA security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate to admin privileges on those nodes. Kubernetes clusters are only affected if they include Windows nodes.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/73272"}, {"timestamp": "2023-11-02T19:17:37Z", "date_only": false, "value": "2023-11-02T19:17:37.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/47fee1de-ae06-4593-83d3-3929a147e92e", "record": "CVE-2023-3676", "field": "creation_timestamp", "uuid": "ab59803a-eb33-4fd5-afa0-5ba45babe20c"}, {"timestamp": "2023-11-27T16:08:33Z", "date_only": false, "value": "2023-11-27T16:08:33+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:7515", "record": "RHSA-2023:7515", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-11-27T16:08:33Z", "date_only": false, "value": "2023-11-27T16:08:33+00:00", "kind": "other", "label": "Date", "source": "csaf_redhat \u00b7 RHSA-2023:7515", "record": "RHSA-2023:7515", "field": "vulnerabilities.0.remediations.0.date"}, {"timestamp": "2023-11-27T16:08:33Z", "date_only": false, "value": "2023-11-27T16:08:33+00:00", "kind": "milestone", "label": "Published", "source": "csaf_redhat \u00b7 RHSA-2023:7515", "record": "RHSA-2023:7515", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-11-27T23:00:00Z", "date_only": false, "value": "2023-11-27T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2163", "record": "WID-SEC-W-2023-2163", "field": "document.tracking.revision_history.6.date"}, {"timestamp": "2023-11-27T23:00:00Z", "date_only": false, "value": "2023-11-27T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2163", "record": "WID-SEC-W-2023-2163", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-11-30T22:06:09.695Z", "date_only": false, "value": "2023-11-30T22:06:09.695Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / kubernetes", "record": "cve-2023-3676", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2023-11-30T22:15:00Z", "date_only": false, "value": "2023-11-30T22:15Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2023-3676", "record": "GSD-2023-3676", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-02T01:01:10Z", "date_only": false, "value": "2023-12-02T01:01:10.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/arpsyndicate/870", "record": "CVE-2023-3676", "field": "creation_timestamp", "uuid": "d0921cab-8bf9-4a3e-bd36-e55b44d7cde5", "content": "#ExploitObserverAlert\n\nCVE-2023-3676\n\nDESCRIPTION: Exploit Observer has 6 entries related to CVE-2023-3676. A security issue was discovered in Kubernetes where a user  that can create pods on Windows nodes may be able to escalate to admin  privileges on those nodes. Kubernetes clusters are only affected if they  include Windows nodes.\n\nFIRST-EPSS: 0.000580000\nNVD-IS: 5.9\nNVD-ES: 2.8", "url": "https://t.me/arpsyndicate/870"}, {"timestamp": "2023-12-13T01:20:54.756Z", "date_only": false, "value": "2023-12-13T01:20:54.756190Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-3676", "record": "GSD-2023-3676", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-03-14T14:30:07Z", "date_only": false, "value": "2024-03-14T14:30:07.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/5522", "record": "CVE-2023-3676", "field": "creation_timestamp", "uuid": "eb51362d-35f4-43ee-9299-8ad7c115b2d1", "content": "\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Akamai \u043f\u0440\u0435\u0434\u0443\u043f\u0440\u0435\u0436\u0434\u0430\u044e\u0442 \u043e \u043d\u043e\u0432\u043e\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 Kubernetes \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434 \u0441 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u044b\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 \u043d\u0430 \u043a\u043e\u043d\u0435\u0447\u043d\u044b\u0445 \u0442\u043e\u0447\u043a\u0430\u0445 Windows \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d PoC.\n\n\u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2023-5528 \u0438 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 Kubernetes \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\u041e\u043d\u0430 \u0441\u0445\u043e\u0436\u0430 \u0441 CVE-2023-3676 (\u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 subPath \u0432 \u0444\u0430\u0439\u043b\u0430\u0445 YAML) \u0438 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u043a\u0430\u043a \u0441\u0438\u0441\u0442\u0435\u043c\u0430 \u043e\u0440\u043a\u0435\u0441\u0442\u0440\u0430\u0446\u0438\u0438 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u043e\u0431\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u0435\u0442 \u0444\u0430\u0439\u043b\u044b YAML.\n\n\u0412 \u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043a\u0430\u043a CVE-2023-3676 \u0431\u044b\u043b \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043b\u0443\u0436\u0431\u043e\u0439 kubelet \u0444\u0430\u0439\u043b\u043e\u0432 YAML, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044e \u043e \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u043e\u0431\u0449\u0435\u0439 \u043f\u0430\u043f\u043a\u0438, CVE-2023-5528 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u043f\u0440\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u043c\u043e\u0434\u0443\u043b\u044f, \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0449\u0435\u0433\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0439 \u0442\u043e\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0440\u0430\u0437\u0434\u0435\u043b\u044b \u0434\u0438\u0441\u043a\u0430.\n\n\u041e\u0434\u043d\u0430 \u0438\u0437 \u0444\u0443\u043d\u043a\u0446\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0441\u0435\u0440\u0432\u0438\u0441 kubelet \u043f\u0440\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 \u0442\u0430\u043a\u043e\u0433\u043e \u043c\u043e\u0434\u0443\u043b\u044f, \u0444\u043e\u0440\u043c\u0438\u0440\u0443\u0435\u0442 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u0441\u0441\u044b\u043b\u043a\u0443 \u043c\u0435\u0436\u0434\u0443 \u0440\u0430\u0441\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0442\u043e\u043c\u0430 \u043d\u0430 \u0443\u0437\u043b\u0435 \u0438 \u043c\u0435\u0441\u0442\u043e\u043f\u043e\u043b\u043e\u0436\u0435\u043d\u0438\u0435\u043c \u0432\u043d\u0443\u0442\u0440\u0438 \u043c\u043e\u0434\u0443\u043b\u044f.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0432\u044b\u0437\u043e\u0432\u00a0cmd, \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u0430\u044f \u0441\u0442\u0440\u043e\u043a\u0430 Windows \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0435\u0442 \u043e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u043c\u0430\u043d\u0434. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0434\u0438\u043d \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440 \u043f\u0440\u0438\u00a0\u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0438 cmd\u00a0\u0438 \u0432\u0432\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u043a\u043e\u043c\u0430\u043d\u0434\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u0443\u0434\u0443\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0441 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438 kubelet.\n\n\u041e\u0434\u043d\u0430\u043a\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0438 \u0438\u043b\u0438 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0438 persistVolume \u2014 \u0442\u0438\u043f\u0430 \u0440\u0435\u0441\u0443\u0440\u0441\u0430 \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u043c\u043e\u0433\u0443\u0442 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0434\u043b\u044f \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u044b\u0434\u0435\u043b\u0435\u043d\u0438\u044f \u043c\u0435\u0441\u0442\u0430 \u0434\u043b\u044f \u0445\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u0438 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0431\u0443\u0434\u0435\u0442 \u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u0442\u044c \u043f\u043e\u0441\u043b\u0435 \u043e\u043a\u043e\u043d\u0447\u0430\u043d\u0438\u044f \u0441\u0440\u043e\u043a\u0430 \u0441\u043b\u0443\u0436\u0431\u044b \u043c\u043e\u0434\u0443\u043b\u044f.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 \u00ablocal.path\u00bb \u0432\u043d\u0443\u0442\u0440\u0438 YAML-\u0444\u0430\u0439\u043b\u0430 persistVolume, \u0447\u0442\u043e\u0431\u044b \u0434\u043e\u0431\u0430\u0432\u0438\u0442\u044c \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u0443\u044e \u043a\u043e\u043c\u0430\u043d\u0434\u0443, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c\u0441\u044f \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u043c\u043e\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f.\n\n\u0427\u0442\u043e\u0431\u044b \u0440\u0435\u0448\u0438\u0442\u044c \u044d\u0442\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0443, Kubernetes \u0443\u0434\u0430\u043b\u0438\u043b \u0432\u044b\u0437\u043e\u0432 cmd \u0438 \u0437\u0430\u043c\u0435\u043d\u0438\u043b \u0435\u0433\u043e \u0432\u0441\u0442\u0440\u043e\u0435\u043d\u043d\u043e\u0439 \u0444\u0443\u043d\u043a\u0446\u0438\u0435\u0439 Go, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0435\u0442 \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u044e \u0441 \u0441\u0438\u043c\u0432\u043e\u043b\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u0441\u0441\u044b\u043b\u043a\u043e\u0439.\n\n\u0412\u0441\u0435 \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044f Kubernetes \u0432\u0435\u0440\u0441\u0438\u0438 1.28.3 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0440\u0430\u043d\u043d\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u0441 \u0443\u0437\u043b\u0430\u043c\u0438 Windows \u0432 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u044b \u0434\u043b\u044f CVE-2023-5528, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f - 1.28.4.\n\n\u041f\u043e\u0441\u043a\u043e\u043b\u044c\u043a\u0443 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u0440\u043e\u0435\u0442\u0441\u044f \u0432 \u0438\u0441\u0445\u043e\u0434\u043d\u043e\u043c \u043a\u043e\u0434\u0435, \u0443\u0433\u0440\u043e\u0437\u0430 \u043e\u0441\u0442\u0430\u043d\u0435\u0442\u0441\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0439, \u0438 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e\u0441\u0442\u044c \u0435\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u044f, \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e, \u0443\u0432\u0435\u043b\u0438\u0447\u0438\u0442\u0441\u044f - \u0438\u043c\u0435\u043d\u043d\u043e \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043d\u0430\u0441\u0442\u043e\u044f\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u0435\u0442\u0441\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u044f\u0442\u044c \u043a\u043b\u0430\u0441\u0442\u0435\u0440, \u0434\u0430\u0436\u0435 \u0435\u0441\u043b\u0438 \u0432 \u043d\u0435\u043c \u043d\u0435\u0442 \u0443\u0437\u043b\u043e\u0432 Windows.", "url": "https://t.me/true_secator/5522"}, {"timestamp": "2024-08-02T07:01:57.315Z", "date_only": false, "value": "2024-08-02T07:01:57.315Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2023-3676", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-08-15T17:57:36.721Z", "date_only": false, "value": "2024-08-15T17:57:36.721+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2163", "record": "WID-SEC-W-2023-2163", "field": "document.tracking.generator.date"}, {"timestamp": "2024-12-18T00:00:00Z", "date_only": false, "value": "2024-12-18T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14599-1", "record": "OPENSUSE-SU-2024:14599-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-12-18T00:00:00Z", "date_only": false, "value": "2024-12-18T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14599-1", "record": "OPENSUSE-SU-2024:14599-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-12-18T00:00:00Z", "date_only": false, "value": "2024-12-18T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14599-1", "record": "OPENSUSE-SU-2024:14599-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-12-18T00:00:00Z", "date_only": false, "value": "2024-12-18T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14599-1", "record": "OPENSUSE-SU-2024:14599-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-02-13T19:20:54Z", "date_only": false, "value": "2025-02-13T19:20:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-7FXM-F474-HF8W", "record": "GHSA-7FXM-F474-HF8W", "field": "modified"}, {"timestamp": "2025-02-27T20:32:36.326Z", "date_only": false, "value": "2025-02-27T20:32:36.326293Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-3676", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2025-02-27T20:32:36.326Z", "date_only": false, "value": "2025-02-27T20:32:36.326293Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-3676", "record": "FKIE_CVE-2023-3676", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-27T20:38:37.768Z", "date_only": false, "value": "2025-02-27T20:38:37.768Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2023-3676", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-02-27T20:38:37.768Z", "date_only": false, "value": "2025-02-27T20:38:37.768Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "cve-2023-3676", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-08-05T04:53:05Z", "date_only": false, "value": "2025-08-05T04:53:05Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-3676", "record": "UBUNTU-CVE-2023-3676", "field": "modified"}, {"timestamp": "2025-08-28T17:07:06Z", "date_only": false, "value": "2025-08-28T17:07:06Z", "kind": "other", "label": "Withdrawn", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2023-3676", "record": "UBUNTU-CVE-2023-3676", "field": "withdrawn"}, {"timestamp": "2026-06-02T14:48:24Z", "date_only": false, "value": "2026-06-02T14:48:24+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:4777", "record": "RHSA-2023:4777", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-02T14:48:24Z", "date_only": false, "value": "2026-06-02T14:48:24+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:4780", "record": "RHSA-2023:4780", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-02T14:48:24Z", "date_only": false, "value": "2026-06-02T14:48:24+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:4777", "record": "RHSA-2023:4777", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-02T14:48:24Z", "date_only": false, "value": "2026-06-02T14:48:24+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:4780", "record": "RHSA-2023:4780", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-02T14:48:24Z", "date_only": false, "value": "2026-06-02T14:48:24+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:4777", "record": "RHSA-2023:4777", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-02T14:48:24Z", "date_only": false, "value": "2026-06-02T14:48:24+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:4780", "record": "RHSA-2023:4780", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-02T14:48:26Z", "date_only": false, "value": "2026-06-02T14:48:26+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:4835", "record": "RHSA-2023:4835", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-02T14:48:26Z", "date_only": false, "value": "2026-06-02T14:48:26+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:4835", "record": "RHSA-2023:4835", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-02T14:48:26Z", "date_only": false, "value": "2026-06-02T14:48:26+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:4835", "record": "RHSA-2023:4835", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-02T14:48:30Z", "date_only": false, "value": "2026-06-02T14:48:30+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:4885", "record": "RHSA-2023:4885", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-06-02T14:48:30Z", "date_only": false, "value": "2026-06-02T14:48:30+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:4885", "record": "RHSA-2023:4885", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-02T14:48:30Z", "date_only": false, "value": "2026-06-02T14:48:30+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:4885", "record": "RHSA-2023:4885", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-06-17T06:14:36.560Z", "date_only": false, "value": "2026-06-17T06:14:36.560", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-3676", "record": "FKIE_CVE-2023-3676", "field": "lastModified"}, {"timestamp": "2026-07-17T11:00:09.216Z", "date_only": false, "value": "2026-07-17T11:00:09.216619Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberwarehouse/102", "record": "CVE-2023-3676", "field": "creation_timestamp", "uuid": "3326debe-9c19-49c1-a9d2-ad2d86421b72", "url": "https://t.me/cyberwarehouse/102"}, {"timestamp": "2026-07-18T00:00:27.407Z", "date_only": false, "value": "2026-07-18T00:00:27.407142Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/cyberwarehouse/102", "record": "CVE-2023-3676", "field": "creation_timestamp", "uuid": "10b58a17-3dc5-4f6f-a3ed-5613cc6818c4", "url": "https://t.me/cyberwarehouse/102"}, {"timestamp": "2026-07-26T02:02:20.939Z", "date_only": false, "value": "2026-07-26T02:02:20.939332Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/1964", "record": "CVE-2023-3676", "field": "creation_timestamp", "uuid": "f83d0a2d-5e2c-462c-a1e9-ef0b5d1277b0", "url": "https://t.me/EchelonEyes/1964"}, {"timestamp": "2026-07-27T00:00:58.099Z", "date_only": false, "value": "2026-07-27T00:00:58.099502Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/1964", "record": "CVE-2023-3676", "field": "creation_timestamp", "uuid": "7122f78f-d34a-4eaf-b21b-08cc635bb32f", "url": "https://t.me/EchelonEyes/1964"}, {"timestamp": "2026-07-28T00:00:25.512Z", "date_only": false, "value": "2026-07-28T00:00:25.512856Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/EchelonEyes/1964", "record": "CVE-2023-3676", "field": "creation_timestamp", "uuid": "3f067b9b-1a55-4fc7-a9df-eb592842f65d", "url": "https://t.me/EchelonEyes/1964"}, {"timestamp": "2026-08-13T12:10:09Z", "date_only": false, "value": "2026-08-13T12:10:09Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-IF32046", "record": "CLEANSTART-2026-IF32046", "field": "published"}, {"timestamp": "2026-08-13T12:10:09Z", "date_only": false, "value": "2026-08-13T12:10:09Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-PM77605", "record": "CLEANSTART-2026-PM77605", "field": "published"}, {"timestamp": "2026-09-01T17:00:17.419Z", "date_only": false, "value": "2026-09-01T17:00:17.419575Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cissp/7185", "record": "CVE-2023-3676", "field": "creation_timestamp", "uuid": "c7ecde2f-b2d6-41f4-8ab3-1e09f053366d", "url": "https://t.me/cissp/7185"}, {"timestamp": "2026-09-18T09:51:57.486Z", "date_only": false, "value": "2026-09-18T09:51:57.486057Z", "kind": "milestone", "label": "Published", "source": "cleanstart \u00b7 CLEANSTART-2026-DE45486", "record": "CLEANSTART-2026-DE45486", "field": "published"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-IF32046", "record": "CLEANSTART-2026-IF32046", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-PM77605", "record": "CLEANSTART-2026-PM77605", "field": "modified"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-IF32046", "record": "CLEANSTART-2026-IF32046", "field": "withdrawn"}, {"timestamp": "2026-09-18T11:59:01.768Z", "date_only": false, "value": "2026-09-18T11:59:01.768079Z", "kind": "other", "label": "Withdrawn", "source": "cleanstart \u00b7 CLEANSTART-2026-PM77605", "record": "CLEANSTART-2026-PM77605", "field": "withdrawn"}, {"timestamp": "2026-09-20T21:22:59Z", "date_only": false, "value": "2026-09-20T21:22:59Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14599-1", "record": "OPENSUSE-SU-2024:14599-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T21:22:59Z", "date_only": false, "value": "2026-09-20T21:22:59Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:14599-1", "record": "OPENSUSE-SU-2024:14599-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-10-08T18:38:25Z", "date_only": false, "value": "2026-10-08T18:38:25Z", "kind": "other", "label": "Updated", "source": "cleanstart \u00b7 CLEANSTART-2026-DE45486", "record": "CLEANSTART-2026-DE45486", "field": "modified"}, {"timestamp": "2026-10-15T12:03:16Z", "date_only": false, "value": "2026-10-15T12:03:16+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_redhat \u00b7 RHSA-2023:7515", "record": "RHSA-2023:7515", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2026-10-15T12:03:16Z", "date_only": false, "value": "2026-10-15T12:03:16+00:00", "kind": "other", "label": "Document generated", "source": "csaf_redhat \u00b7 RHSA-2023:7515", "record": "RHSA-2023:7515", "field": "document.tracking.generator.date"}, {"timestamp": "2026-10-15T12:03:16Z", "date_only": false, "value": "2026-10-15T12:03:16+00:00", "kind": "other", "label": "Updated", "source": "csaf_redhat \u00b7 RHSA-2023:7515", "record": "RHSA-2023:7515", "field": "document.tracking.current_release_date"}]}