Debian/kubernetes: medium 6.5
In all Kubernetes versions prior to v1.11.8, v1.12.6, and v1.13.4, users that are authorized to make patch requests to the Kubernetes API Server can send a specially crafted patch of type "json-patch"
Action: Upgrade kubernetes to 1.17.4-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.17.4-1 | - |
Fixed versions
| 1.17.4-1 |
Sources
- osv: DEBIAN-CVE-2019-1002100#Debian:14/kubernetes
- https://security-tracker.debian.org/tracker/CVE-2019-1002100
published · modified · JSON