CVE catalog
CVE-2024-33394
kubevirt-container-disk-1.2.2-2.1 on GA media
- Severity
- Medium · CVSS 6
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.33% · Oct 25, 2026
This update for kubevirt, virt-api-container, virt-controller-container, virt-exportproxy-container, virt-exportserver-container, virt-handler-container, virt-launcher-container, virt-libguestfs-tools-container, virt-operator-container, virt-pr-helper-container fixes the following issues: - Collect component Role rules under operator Role instead of ClusterRole (bsc#1223965, CVE-2024-33394) - Ensure procps is installed (provides ps for tests) Containers were rebuilt against current go and maintenance updates.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Suse | kubevirt | linux enterprise module for containers 15 sp6 | 1.1.1-150600.5.3.2 | fixed |
| Opensuse | kubevirt | leap 15.6 | 1.1.1-150600.5.3.2 | fixed |
| Suse | kubevirt | linux enterprise micro 5.5 | 1.1.1-150500.8.18.1 | fixed |
| Suse | kubevirt | linux enterprise module for containers 15 sp5 | 1.1.1-150500.8.18.1 | fixed |
| Opensuse | kubevirt | leap 15.5 | 1.1.1-150500.8.18.1 | fixed |
| Opensuse | kubevirt | tumbleweed | 1.2.2-2.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Suse | kubevirt | rpm | linux enterprise module for containers 15 sp6 | 1.1.1-150600.5.3.2 | Not reported | SUSE-SU-2024:2318-1 | Not reported |
| Opensuse | kubevirt | rpm | leap 15.6 | 1.1.1-150600.5.3.2 | Not reported | SUSE-SU-2024:2318-1 | Not reported |
| Suse | kubevirt | rpm | linux enterprise micro 5.5 | 1.1.1-150500.8.18.1 | Not reported | SUSE-SU-2024:2246-1 | Not reported |
| Suse | kubevirt | rpm | linux enterprise module for containers 15 sp5 | 1.1.1-150500.8.18.1 | Not reported | SUSE-SU-2024:2246-1 | Not reported |
| Opensuse | kubevirt | rpm | leap 15.5 | 1.1.1-150500.8.18.1 | Not reported | SUSE-SU-2024:2246-1 | Not reported |
| Opensuse | kubevirt | rpm | tumbleweed | 1.2.2-2.1 | Not reported | OPENSUSE-SU-2024:14058-1 | Not reported |
OpenFactory catalog packages
Matching against OpenFactory catalog package versions is in progress.
References
- [https://ftp.suse.com/pub/projects/security/csaf/suse-su-2024_2246-1.json]
- [https://osv.dev/vulnerability/SUSE-SU-2024:2246-1]
- [https://osv.dev/vulnerability/SUSE-SU-2024:2318-1]
- [https://osv.dev/vulnerability/openSUSE-SU-2024:14058-1]
[FIRST EPSS] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX]