CVE-2019-11247
1 advisory.
Go/k8s.io/apiextensions-apiserver CVE-2019-11247: high 8.1, EPSS 2.15%
Kubernetes kube-apiserver unauthorized access
Action: Upgrade k8s.io/apiextensions-apiserver to 0.13.9 or later.
go get k8s.io/apiextensions-apiserver@v0.13.9go get k8s.io/apiextensions-apiserver@v0.14.5go get k8s.io/apiextensions-apiserver@v0.15.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.7.0 | 0.13.9 | - |
| 0.14.0 | 0.14.5 | - |
| 0.15.0 | 0.15.2 | - |
Fixed versions
| 0.13.9 | 0.14.5 | 0.15.2 |
Sources
- osv: GHSA-fp37-c92q-4pwq
- https://nvd.nist.gov/vuln/detail/CVE-2019-11247
- https://github.com/kubernetes/kubernetes/issues/80983
- https://github.com/kubernetes/kubernetes/pull/80750
- https://github.com/kubernetes/kubernetes/pull/80850
- https://github.com/kubernetes/kubernetes/pull/80851
- https://github.com/kubernetes/kubernetes/pull/80852
- https://github.com/kubernetes/apiextensions-apiserver/commit/b9b7d2b3f32f8edbeb47b8726710eeb868bce196
- https://access.redhat.com/errata/RHBA-2019:2816
- https://access.redhat.com/errata/RHBA-2019:2824
- https://access.redhat.com/errata/RHSA-2019:2690
- https://access.redhat.com/errata/RHSA-2019:2769
- https://github.com/kubernetes/apiextensions-apiserver
- https://groups.google.com/d/msg/kubernetes-security-announce/vUtEcSEY6SM/v2ZZxsmtFQAJ
- https://security.netapp.com/advisory/ntap-20190919-0003
CVE-2019-11247 · published · modified · JSON