search

wiz-sec / open-cvdb

An open project to list all publicly known cloud vulnerabilities and CSP security issues
https://cloudvulndb.org
Creative Commons Attribution 4.0 International
306 stars 61 forks source link

[Contribution] Cross Container Attacks: The Bewildered eBPF on Clouds #211

Open ramimac opened 1 year ago

ramimac commented 1 year ago

Summary (give a brief description of the issue)

image

Specifically, we also find that the Google Cloud Shell can be exploited as it exposes the docker.sock to containers, allowing attackers to create a privileged container to run eBPF

image

Three platforms’ default Kubernetes clusters (i.e., Alibaba ACK, Azure AKS, and AWS EKS) containers over-privileged Pods. ... Azure, AWS, and Alibaba have confirmed the issues and plan to remove these overprivileged Pods

References (provide links to blogposts, etc.)

Cross Container Attacks: The Bewildered eBPF on Clouds