csirt@kutim:~/threat-intel/cve/CVE-2024-7598

Katalog CVE

CVSS 3.1 · Low EPSS 0,32%

Kerentanan Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition'). Skor CVSS 3.1 3.1 (Low) menurut liggitt.net.

Deskripsi (NVD)

A security issue was discovered in Kubernetes where a malicious or compromised pod could bypass network restrictions enforced by network policies during namespace deletion. The order in which objects are deleted during namespace termination is not defined, and it is possible for network policies to be deleted before the pods that they protect. This can lead to a brief period in which the pods are running, but network policies that should apply to connections to and from the pods are not enforced.

Rincian

Terbit di NVD
20 Maret 2025
Terakhir diubah
17 Juni 2026
Status NVD
Deferred
CVSS 3.1
3.1 (Low), sumber liggitt.net
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
EPSS (30 hari)
0,32% peluang dieksploitasi; lebih tinggi dari 23,2% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.