Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

kubernetes kubernetes - vulnerabilities and exploits

(subscribe to this query)
8.2
CVSSv3
CVE-2019-11248
The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is exposed over the Kubelet's healthz port. This debugging endpoint can potentially leak sensitive information such as internal Kubelet memory addresses and co...
Kubernetes Kubernetes 1.13.0Kubernetes Kubernetes 1.13.3Kubernetes Kubernetes 1.13.4Kubernetes Kubernetes 1.13.6Kubernetes Kubernetes 1.13.7Kubernetes Kubernetes 1.14.0Kubernetes Kubernetes 1.14.3Kubernetes Kubernetes 1.15.0Kubernetes Kubernetes 1.13.1Kubernetes Kubernetes 1.13.2Kubernetes Kubernetes 1.13.5Kubernetes Kubernetes 1.14.1Kubernetes Kubernetes 1.14.2Kubernetes KubernetesKubernetes Kubernetes 1.13.8Kubernetes Kubernetes 1.14.4
6.5
CVSSv3
CVE-2017-1002100
Default access permissions for Persistent Volumes (PVs) created by the Kubernetes Azure cloud provider in versions 1.6.0 to 1.6.5 are set to "container" which exposes a URI that can be accessed without authentication on the public internet. Access to the URI string requ...
Kubernetes Kubernetes 1.6.1Kubernetes Kubernetes 1.6.2Kubernetes Kubernetes 1.6.3Kubernetes Kubernetes 1.6.4Kubernetes Kubernetes 1.6.5Kubernetes Kubernetes 1.6.0
9.8
CVSSv3
CVE-2017-1000056
Kubernetes version 1.5.0-1.5.4 is vulnerable to a privilege escalation in the PodSecurityPolicy admission plugin resulting in the ability to make use of any existing PodSecurityPolicy object.
Kubernetes Kubernetes 1.5.2Kubernetes Kubernetes 1.5.1Kubernetes Kubernetes 1.5.3Kubernetes Kubernetes 1.5.4Kubernetes Kubernetes 1.5.0
4.1
CVSSv3
CVE-2020-8561
A security issue exists in Kubernetes where actors that control the responses of MutatingWebhookConfiguration or ValidatingWebhookConfiguration requests are able to redirect kube-apiserver requests to private networks of the apiserver. If that user can view kube-apiserver logs wh...
Kubernetes Kubernetes 1.20.11Kubernetes Kubernetes 1.21.5Kubernetes Kubernetes 1.22.2
4.8
CVSSv3
CVE-2021-25737
A security issue exists in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.
Kubernetes KubernetesKubernetes Kubernetes 1.21.0
6.5
CVSSv3
CVE-2019-11246
The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary...
Kubernetes KubernetesKubernetes Kubernetes 1.12.11
3.1
CVSSv3
CVE-2020-8562
As mitigations to a report from 2019 and CVE-2020-8555, Kubernetes attempts to prevent proxied connections from accessing link-local or localhost networks when making user-driven connections to Services, Pods, Nodes, or StorageClass service providers. As part of this mitigation K...
Kubernetes KubernetesKubernetes Kubernetes 1.21.0
7.5
CVSSv3
CVE-2019-9946
Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI 'portmap' plugin, used to setup HostPorts for CNI, inserts rules at the front of the iptables nat chains; which ...
Kubernetes KubernetesKubernetes Kubernetes 1.13.6Kubernetes Kubernetes 1.14.0Cncf PortmapNetapp Cloud Insights -
6.5
CVSSv3
CVE-2019-11250
The Kubernetes client-go library logs request headers at verbosity levels of 7 or higher. This can disclose credentials to unauthorized users via logs or command output. Kubernetes components (such as kube-apiserver) prior to v1.16.0, which make use of basic or bearer token authe...
Kubernetes Kubernetes 1.16.0Kubernetes KubernetesKubernetes Kubernetes 1.15.4Kubernetes Kubernetes 1.15.3Redhat Openshift Container Platform 3.11Redhat Openshift Container Platform 4.1
7.8
CVSSv3
CVE-2019-11245
In kubelet v1.13.6 and v1.14.2, containers for pods that do not specify an explicit runAsUser attempt to run as uid 0 (root) on container restart, or if the image was previously pulled to the node. If the pod specified mustRunAsNonRoot: true, the kubelet will refuse to start the ...
Kubernetes Kubernetes 1.13.6Kubernetes Kubernetes 1.14.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-26925CVE-2023-41826LFICVE-2022-22364CVE-2024-2887command injectionremote code executionCVE-2024-34446CVE-2022-48699
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook