Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2017-1002102

Опубликовано: 13 мар. 2018
Источник: debian
EPSS Низкий

Описание

In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using a secret, configMap, projected or downwardAPI volume can trigger deletion of arbitrary files/directories from the nodes where they are running.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
kubernetesfixed1.7.16+dfsg-1package

Примечания

  • https://github.com/kubernetes/kubernetes/issues/60814

EPSS

Процентиль: 56%
0.00345
Низкий

Связанные уязвимости

CVSS3: 7.1
redhat
больше 7 лет назад

In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using a secret, configMap, projected or downwardAPI volume can trigger deletion of arbitrary files/directories from the nodes where they are running.

CVSS3: 7.1
nvd
больше 7 лет назад

In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using a secret, configMap, projected or downwardAPI volume can trigger deletion of arbitrary files/directories from the nodes where they are running.

CVSS3: 5.6
github
около 3 лет назад

Kubernetes arbitrary file overwrite

oracle-oval
около 7 лет назад

ELSA-2018-4061: kubernetes security update (IMPORTANT)

EPSS

Процентиль: 56%
0.00345
Низкий