kubernetes kubernetes 1.14.2 vulnerabilities and exploits

(subscribe to this query)

In kubelet v1.13.6 and v1.14.2, containers for pods that do not specify an explicit runAsUser attempt to run as uid 0 (root) on container restart, or if the image was previously pulled to the node. If the pod specified mustRunAsNonRoot: true, the kubelet will refuse to start the ...

Kubernetes Kubernetes 1.13.6 Kubernetes Kubernetes 1.14.2

1 Github repository

The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is exposed over the Kubelet's healthz port. This debugging endpoint can potentially leak sensitive information such as internal Kubelet memory addresses and co...

Kubernetes Kubernetes 1.13.0 Kubernetes Kubernetes 1.13.3 Kubernetes Kubernetes 1.13.4 Kubernetes Kubernetes 1.13.6 Kubernetes Kubernetes 1.13.7 Kubernetes Kubernetes 1.14.0 Kubernetes Kubernetes 1.14.3 Kubernetes Kubernetes 1.15.0 Kubernetes Kubernetes 1.13.1 Kubernetes Kubernetes 1.13.2 Kubernetes Kubernetes 1.13.5 Kubernetes Kubernetes 1.14.1 Kubernetes Kubernetes 1.14.2 Kubernetes Kubernetes Kubernetes Kubernetes 1.13.8 Kubernetes Kubernetes 1.14.4

The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary...

Kubernetes Kubernetes Kubernetes Kubernetes 1.12.11

2 Github repositories

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An attacker with the ability to update pod labels can cause Cilium to apply incorrect network policies. This issue arises due to the fact that on pod update, Cilium incorrectly uses user-pr...

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An attacker with the ability to create or modify CiliumNetworkPolicy objects in a particular namespace is able to affect traffic on an entire Cilium cluster, potentially bypassing policy en...

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook