tocsin

CVE-2017-1002102

2 advisories.

Go/k8s.io/kubernetes CVE-2017-1002102: medium 5.6

Kubernetes arbitrary file overwrite

Action: Upgrade k8s.io/kubernetes to 1.7.14 or later.

go get k8s.io/kubernetes@v1.7.14
go get k8s.io/kubernetes@v1.8.9
go get k8s.io/kubernetes@v1.9.4

Affected

introducedfixedlast affected
1.3.01.7.14-
1.8.01.8.9-
1.9.01.9.4-

Fixed versions

1.7.141.8.91.9.4

Sources

CVE-2017-1002102 · published · modified · JSON

Go/k8s.io/kubernetes CVE-2017-1002102: unknown

Kubernetes can trigger deletion of arbitrary files from the nodes where containers are running in k8s.io/kubernetes

Action: Upgrade k8s.io/kubernetes to 1.7.14 or later.

go get k8s.io/kubernetes@v1.7.14
go get k8s.io/kubernetes@v1.8.9
go get k8s.io/kubernetes@v1.9.4

Affected

introducedfixedlast affected
1.3.01.7.14-
1.8.01.8.9-
1.9.01.9.4-

Fixed versions

1.7.141.8.91.9.4

Sources

CVE-2017-1002102 · published · modified · JSON