GHSA-579h-mv94-g4gp
Privilege Escalation in Kubernetes
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2018-1002105
- Alias
- GO-2022-0792
- CVSS_V3
- CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server's TLS credentials used to establish the backend connection.
Paquets affectés
| Paquet | Versions |
|---|---|
| Go · github.com/kubernetes/kubernetes | introduced 0, fixed 1.10.11 |
| Go · github.com/kubernetes/kubernetes | introduced 1.11.0, fixed 1.11.5 |
| Go · github.com/kubernetes/kubernetes | introduced 1.12.0, fixed 1.12.3 |
Références
- https://nvd.nist.gov/vuln/detail/CVE-2018-1002105 ADVISORY
- https://github.com/kubernetes/kubernetes/issues/71411 WEB
- https://github.com/kubernetes/kubernetes/commit/2257c1ecbe3c0cf71dd50b82752ae189c94ec905 WEB
- https://www.securityfocus.com/bid/106068 WEB
- https://www.openwall.com/lists/oss-security/2019/07/06/4 WEB
- https://www.openwall.com/lists/oss-security/2019/07/06/3 WEB
- https://www.openwall.com/lists/oss-security/2019/06/28/2 WEB
- https://www.exploit-db.com/exploits/46053 WEB
- https://www.exploit-db.com/exploits/46052 WEB
- https://www.coalfire.com/The-Coalfire-Blog/December-2018/Kubernetes-Vulnerability-What-You-Can-Should-Do WEB
- https://security.netapp.com/advisory/ntap-20190416-0001 WEB
- https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html WEB
- https://groups.google.com/forum/#!topic/kubernetes-announce/GVllWCg6L88 WEB
- https://github.com/evict/poc_CVE-2018-1002105 WEB
- https://access.redhat.com/errata/RHSA-2018:3754 WEB
- https://access.redhat.com/errata/RHSA-2018:3752 WEB
- https://access.redhat.com/errata/RHSA-2018:3742 WEB
- https://access.redhat.com/errata/RHSA-2018:3624 WEB
- https://access.redhat.com/errata/RHSA-2018:3598 WEB
- https://access.redhat.com/errata/RHSA-2018:3551 WEB
- https://access.redhat.com/errata/RHSA-2018:3549 WEB
- https://access.redhat.com/errata/RHSA-2018:3537 WEB
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — GitHub Advisory Database |