Go/k8s.io/kubernetes CVE-2018-1002100: unknown, EPSS 1.67%
Kubernetes arbitrary file overwrite in k8s.io/kubernetes
Action: Upgrade k8s.io/kubernetes to 1.9.6 or later.
go get k8s.io/kubernetes@v1.9.6Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.5.0 | 1.9.6 | - |
Fixed versions
| 1.9.6 |
Sources
- osv: GO-2023-1959
- https://github.com/advisories/GHSA-2jq6-ffph-p4h8
- https://bugzilla.redhat.com/show_bug.cgi?id=1564305
- https://github.com/kubernetes/kubernetes/issues/61297
- https://hansmi.ch/articles/2018-04-openshift-s2i-security
CVE-2018-1002100 · published · modified · JSON