CVE-2018-1002105critical

CVE-2018-1002105: critical vulnerability in Kubernetes

Published · Updated

Follow this CVE+ Monitor Kubernetes+ Monitor kubernetes

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

75Vexday Risk Score

Keep watching. It has a public proof of concept.

ssvc Attendcvss 9.8epss 87%
from disclosure to weaponsame day
Published on NVDDec 5
1st PoCDec 5
What the vendors declare (VEX)

Official vendor statements in CSAF/VEX format: whether their product is affected, already fixed, or ruled out — and why. These are the vendor's assertions, not Vexday's judgment.

Red HatVEX document ↗
Affected
1 product (7 components)
Red Hat OpenShift Enterprise 3.0
workaround: See the vulnerability article for mitigation procedures.
Fixed
10 products (236 components)
Red Hat OpenShift Container Platform 3.10 · Red Hat OpenShift Container Platform 3.7 · Red Hat OpenShift Container Platform 3.5 · Red Hat OpenShift Container Platform 3.6 · Red Hat OpenShift Container Platform 3.3 · and others 5
fix ↗
Not affected
3 products (93 components) — because the vulnerable code is not present in the product
Red Hat OpenShift Container Platform 3.11 · Red Hat OpenShift Container Platform 3.9 · Red Hat OpenShift Container Platform 3.8
In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server's TLS credentials used to establish the backend connection.
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Kubernetes · Kubernetes
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Kubernetes

In the same product, most dangerous first.

CVE-2019-11248MEDIUMKubernetes kubelet exposes /debug/pprof info on healthz portEPSS 75.1%CVE-2019-11253HIGHKubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attackEPSS 25.9%CVE-2019-1002100MEDIUMCVE-2019-1002100EPSS 16.9%CVE-2017-1002101HIGHCVE-2017-1002101EPSS 13.3%CVE-2019-1002101MEDIUMkubectl cp path traversalEPSS 12.8%CVE-2020-8554MEDIUMKubernetes man in the middle using LoadBalancer or ExternalIPsEPSS 8.7%