CVE-2019-11244
1 advisory.
Go/k8s.io/client-go CVE-2019-11244: medium 5, EPSS 0.50%
Kubernetes Unsafe Cacheing
Action: Upgrade k8s.io/client-go to 1.12.9 or later.
go get k8s.io/client-go@v1.12.9Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.8.0 | 1.12.9 | - |
Fixed versions
| 1.12.9 |
Sources
- osv: GHSA-2575-pghm-6qqx
- https://nvd.nist.gov/vuln/detail/CVE-2019-11244
- https://github.com/kubernetes/kubernetes/issues/76676
- https://github.com/kubernetes/kubernetes/pull/77874
- https://github.com/kubernetes/kubernetes/pull/77874/commits/f228ae3364729caed59087e23c42868454bc3ff4
- https://github.com/kubernetes/client-go/commit/790a4f63632139cf6731014d00a9a8338f1fbd7d
- https://access.redhat.com/errata/RHSA-2019:3942
- https://access.redhat.com/errata/RHSA-2020:0020
- https://access.redhat.com/errata/RHSA-2020:0074
- https://security.netapp.com/advisory/ntap-20190509-0002
- http://www.securityfocus.com/bid/108064
CVE-2019-11244 · published · modified · JSON