CVE-2018-1002105
2 advisories.
Go/github.com/kubernetes/kubernetes CVE-2018-1002105: critical 9.8, EPSS 86.98%
Privilege Escalation in Kubernetes
Action: Upgrade github.com/kubernetes/kubernetes to 1.10.11 or later.
go get github.com/kubernetes/kubernetes@v1.10.11go get github.com/kubernetes/kubernetes@v1.11.5go get github.com/kubernetes/kubernetes@v1.12.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.10.11 | - |
| 1.11.0 | 1.11.5 | - |
| 1.12.0 | 1.12.3 | - |
Fixed versions
| 1.10.11 | 1.11.5 | 1.12.3 |
Sources
- osv: GHSA-579h-mv94-g4gp
- https://nvd.nist.gov/vuln/detail/CVE-2018-1002105
- https://github.com/kubernetes/kubernetes/issues/71411
- https://github.com/kubernetes/kubernetes/commit/2257c1ecbe3c0cf71dd50b82752ae189c94ec905
- https://www.securityfocus.com/bid/106068
- https://www.openwall.com/lists/oss-security/2019/07/06/4
- https://www.openwall.com/lists/oss-security/2019/07/06/3
- https://www.openwall.com/lists/oss-security/2019/06/28/2
- https://www.exploit-db.com/exploits/46053
- https://www.exploit-db.com/exploits/46052
- https://www.coalfire.com/The-Coalfire-Blog/December-2018/Kubernetes-Vulnerability-What-You-Can-Should-Do
- https://security.netapp.com/advisory/ntap-20190416-0001
- https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html
- https://groups.google.com/forum/#!topic/kubernetes-announce/GVllWCg6L88
- https://github.com/evict/poc_CVE-2018-1002105
- https://access.redhat.com/errata/RHSA-2018:3754
- https://access.redhat.com/errata/RHSA-2018:3752
- https://access.redhat.com/errata/RHSA-2018:3742
- https://access.redhat.com/errata/RHSA-2018:3624
- https://access.redhat.com/errata/RHSA-2018:3598
- https://access.redhat.com/errata/RHSA-2018:3551
- https://access.redhat.com/errata/RHSA-2018:3549
- https://access.redhat.com/errata/RHSA-2018:3537
CVE-2018-1002105 · published · modified · JSON
Go/github.com/kubernetes/kubernetes CVE-2018-1002105: unknown, EPSS 86.98%
Privilege Escalation in Kubernetes in github.com/kubernetes/kubernetes
Action: Upgrade github.com/kubernetes/kubernetes to 1.10.11 or later.
go get github.com/kubernetes/kubernetes@v1.10.11go get github.com/kubernetes/kubernetes@v1.11.5go get github.com/kubernetes/kubernetes@v1.12.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.10.11 | - |
| 1.11.0 | 1.11.5 | - |
| 1.12.0 | 1.12.3 | - |
Fixed versions
| 1.10.11 | 1.11.5 | 1.12.3 |
Sources
- osv: GO-2022-0792
- https://github.com/advisories/GHSA-579h-mv94-g4gp
- https://nvd.nist.gov/vuln/detail/CVE-2018-1002105
- https://github.com/kubernetes/kubernetes/commit/2257c1ecbe3c0cf71dd50b82752ae189c94ec905
- https://github.com/kubernetes/kubernetes/issues/71411
- https://access.redhat.com/errata/RHSA-2018:3537
- https://access.redhat.com/errata/RHSA-2018:3549
- https://access.redhat.com/errata/RHSA-2018:3551
- https://access.redhat.com/errata/RHSA-2018:3598
- https://access.redhat.com/errata/RHSA-2018:3624
- https://access.redhat.com/errata/RHSA-2018:3752
- https://access.redhat.com/errata/RHSA-2018:3754
- https://github.com/evict/poc_CVE-2018-1002105
- https://groups.google.com/forum/#!topic/kubernetes-announce/GVllWCg6L88
- https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html
- https://security.netapp.com/advisory/ntap-20190416-0001
- https://www.coalfire.com/The-Coalfire-Blog/December-2018/Kubernetes-Vulnerability-What-You-Can-Should-Do
- https://www.exploit-db.com/exploits/46052
- https://www.exploit-db.com/exploits/46053
- https://www.openwall.com/lists/oss-security/2019/06/28/2
- https://www.openwall.com/lists/oss-security/2019/07/06/3
- https://www.openwall.com/lists/oss-security/2019/07/06/4
CVE-2018-1002105 · published · modified · JSON