GO-2022-0792
Privilege Escalation in Kubernetes in github.com/kubernetes/kubernetes
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2018-1002105
- Alias
- GHSA-579h-mv94-g4gp
Description
Privilege Escalation in Kubernetes in github.com/kubernetes/kubernetes
Paquets affectés
| Paquet | Versions |
|---|---|
| Go · github.com/kubernetes/kubernetes | introduced 0, fixed 1.10.11, introduced 1.11.0, fixed 1.11.5, introduced 1.12.0, fixed 1.12.3 |
Références
- https://github.com/advisories/GHSA-579h-mv94-g4gp ADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2018-1002105 ADVISORY
- https://github.com/kubernetes/kubernetes/commit/2257c1ecbe3c0cf71dd50b82752ae189c94ec905 FIX
- https://github.com/kubernetes/kubernetes/issues/71411 REPORT
- https://access.redhat.com/errata/RHSA-2018:3537 WEB
- https://access.redhat.com/errata/RHSA-2018:3549 WEB
- https://access.redhat.com/errata/RHSA-2018:3551 WEB
- https://access.redhat.com/errata/RHSA-2018:3598 WEB
- https://access.redhat.com/errata/RHSA-2018:3624 WEB
- https://access.redhat.com/errata/RHSA-2018:3752 WEB
- https://access.redhat.com/errata/RHSA-2018:3754 WEB
- https://github.com/evict/poc_CVE-2018-1002105 WEB
- https://groups.google.com/forum/#!topic/kubernetes-announce/GVllWCg6L88 WEB
- https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html WEB
- https://security.netapp.com/advisory/ntap-20190416-0001 WEB
- https://www.coalfire.com/The-Coalfire-Blog/December-2018/Kubernetes-Vulnerability-What-You-Can-Should-Do WEB
- https://www.exploit-db.com/exploits/46052 WEB
- https://www.exploit-db.com/exploits/46053 WEB
- https://www.openwall.com/lists/oss-security/2019/06/28/2 WEB
- https://www.openwall.com/lists/oss-security/2019/07/06/3 WEB
- https://www.openwall.com/lists/oss-security/2019/07/06/4 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |