CVE-2019-11253
2 advisories.
Go/k8s.io/kubernetes CVE-2019-11253: high 7.5
XML Entity Expansion and Improper Input Validation in Kubernetes API server
Action: Upgrade k8s.io/kubernetes to 1.13.12 or later.
go get k8s.io/kubernetes@v1.13.12go get k8s.io/kubernetes@v1.14.8go get k8s.io/kubernetes@v1.15.5go get k8s.io/kubernetes@v1.16.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.13.12 | - |
| 1.14.0 | 1.14.8 | - |
| 1.15.0 | 1.15.5 | - |
| 1.16.0 | 1.16.2 | - |
Fixed versions
| 1.13.12 | 1.14.8 | 1.15.5 | 1.16.2 |
Sources
- osv: GHSA-pmqp-h87c-mr78
- https://nvd.nist.gov/vuln/detail/CVE-2019-11253
- https://github.com/kubernetes/kubernetes/issues/83253
- https://github.com/kubernetes/kubernetes/pull/83261
- https://access.redhat.com/errata/RHSA-2019:3239
- https://access.redhat.com/errata/RHSA-2019:3811
- https://access.redhat.com/errata/RHSA-2019:3905
- https://gist.github.com/bgeesaman/0e0349e94cd22c48bf14d8a9b7d6b8f2
- https://groups.google.com/forum/#!topic/kubernetes-security-announce/jk8polzSUxs
- https://pkg.go.dev/vuln/GO-2022-0703
- https://security.netapp.com/advisory/ntap-20191031-0006
CVE-2019-11253 · published · modified · JSON
Go/k8s.io/kubernetes CVE-2019-11253: unknown
XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes
Action: Upgrade k8s.io/kubernetes to 1.13.12 or later.
go get k8s.io/kubernetes@v1.13.12go get k8s.io/kubernetes@v1.14.8go get k8s.io/kubernetes@v1.15.5go get k8s.io/kubernetes@v1.16.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.13.12 | - |
| 1.14.0 | 1.14.8 | - |
| 1.15.0 | 1.15.5 | - |
| 1.16.0 | 1.16.2 | - |
Fixed versions
| 1.13.12 | 1.14.8 | 1.15.5 | 1.16.2 |
Sources
- osv: GO-2022-0703
- https://github.com/advisories/GHSA-pmqp-h87c-mr78
- https://access.redhat.com/errata/RHSA-2019:3239
- https://access.redhat.com/errata/RHSA-2019:3811
- https://access.redhat.com/errata/RHSA-2019:3905
- https://gist.github.com/bgeesaman/0e0349e94cd22c48bf14d8a9b7d6b8f2
- https://github.com/kubernetes/kubernetes/issues/83253
- https://github.com/kubernetes/kubernetes/pull/83261
- https://groups.google.com/forum/#!topic/kubernetes-security-announce/jk8polzSUxs
- https://security.netapp.com/advisory/ntap-20191031-0006
CVE-2019-11253 · published · modified · JSON