Vulnerabilities > CVE-2022-41939 - Unspecified vulnerability in Linuxfoundation Knative Func

CVSS 7.4 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

linuxfoundation

NVD

Published: 2022-11-19

Updated: 2024-11-21

Summary

knative.dev/func is is a client library and CLI enabling the development and deployment of Kubernetes functions. Developers using a malicious or compromised third-party buildpack could expose their registry credentials or local docker socket to a malicious `lifecycle` container. This issues has been patched in PR #1442, and is part of release 1.8.1. This issue only affects users who are using function buildpacks from third-parties; pinning the builder image to a specific content-hash with a valid `lifecycle` image will also mitigate the attack.

Vulnerable Configurations

Part	Description	Count
Application	Linuxfoundation Linuxfoundation Knative Func - Linuxfoundation Knative Func 0.0.16 Linuxfoundation Knative Func 0.0.17 Linuxfoundation Knative Func 0.0.18 Linuxfoundation Knative Func 0.0.19 Linuxfoundation Knative Func 0.1.0 Linuxfoundation Knative Func 0.2.0 Linuxfoundation Knative Func 0.2.1 Linuxfoundation Knative Func 0.2.2 Linuxfoundation Knative Func 0.3.0 Linuxfoundation Knative Func 0.4.0 Linuxfoundation Knative Func 0.5.0 Linuxfoundation Knative Func 0.6.0 Linuxfoundation Knative Func 0.6.1 Linuxfoundation Knative Func 0.6.2 Linuxfoundation Knative Func 0.7.0 Linuxfoundation Knative Func 0.8.0 Linuxfoundation Knative Func 0.9.0 Linuxfoundation Knative Func 0.10.0 Linuxfoundation Knative Func 0.11.0 Linuxfoundation Knative Func 0.12.0 Linuxfoundation Knative Func 0.12.1 Linuxfoundation Knative Func 0.13.0 Linuxfoundation Knative Func 0.14.0 Linuxfoundation Knative Func 0.15.0 Linuxfoundation Knative Func 0.15.1 Linuxfoundation Knative Func 0.16.0 Linuxfoundation Knative Func 0.17.0 Linuxfoundation Knative Func 0.17.1 Linuxfoundation Knative Func 0.18.0 Linuxfoundation Knative Func 0.19.0 Linuxfoundation Knative Func 0.20.0 Linuxfoundation Knative Func 0.21.0 Linuxfoundation Knative Func 0.21.1 Linuxfoundation Knative Func 0.21.2 Linuxfoundation Knative Func 0.22.0 Linuxfoundation Knative Func 0.22.1 Linuxfoundation Knative Func 0.23.0 Linuxfoundation Knative Func 0.23.1 Linuxfoundation Knative Func 0.24.0 Linuxfoundation Knative Func 0.25.0 Linuxfoundation Knative Func 0.25.1 Linuxfoundation Knative Func 0.26.0 Linuxfoundation Knative Func 0.34.0 Linuxfoundation Knative Func 0.34.1 Linuxfoundation Knative Func 0.35.0 Linuxfoundation Knative Func 0.35.1 Linuxfoundation Knative Func 1.7.0 Linuxfoundation Knative Func 1.7.1 Linuxfoundation Knative Func 1.7.1.0 Linuxfoundation Knative Func 1.8.0	51

Summary

Vulnerable Configurations

References