Kubernetes — открытое программное обеспечение для оркестровки контейнеризированных приложений — автоматизации их развёртывания, масштабирования и координации в условиях кластера.
Релизный цикл, информация об уязвимостях
График релизов
Количество 318
GHSA-6g96-g4m6-hw69
Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI 'portmap' plugin, used to setup HostPorts for CNI, inserts rules at the front of the iptables nat chains; which take precedence over the KUBE- SERVICES chain. Because of this, the HostPort/portmap rule could match incoming traffic even if there were better fitting, more specific service definition rules like NodePorts later in the chain. The issue is fixed in CNI 0.7.5 and Kubernetes 1.11.9, 1.12.7, 1.13.5, and 1.14.0.
GHSA-q4rr-64r9-fwgf
Kubernetes DoS Vulnerability
GHSA-2h9c-34v6-3qmr
Kubernetes in OpenShift3 Access Control Misconfiguration
GHSA-mqf3-28j7-3mj6
Information Exposure in Kubernetes
GHSA-34jx-wx69-9x8v
Symlink Attack in kubectl cp
GHSA-wqwf-x5cj-rg56
Kubernetes Arbitrary Command Injection
GHSA-2575-pghm-6qqx
Kubernetes Unsafe Cacheing
GHSA-579h-mv94-g4gp
Privilege Escalation in Kubernetes
GHSA-wqv3-8cm6-h6wg
Improper Authentication in Kubernetes
GHSA-x6mj-w4jf-jmgw
Server Side Request Forgery (SSRF) in Kubernetes
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано 1 | |
|---|---|---|---|---|
| GHSA-6g96-g4m6-hw69 Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI 'portmap' plugin, used to setup HostPorts for CNI, inserts rules at the front of the iptables nat chains; which take precedence over the KUBE- SERVICES chain. Because of this, the HostPort/portmap rule could match incoming traffic even if there were better fitting, more specific service definition rules like NodePorts later in the chain. The issue is fixed in CNI 0.7.5 and Kubernetes 1.11.9, 1.12.7, 1.13.5, and 1.14.0. | CVSS3: 7.5 | 0% Низкий | около 3 лет назад |
| GHSA-q4rr-64r9-fwgf Kubernetes DoS Vulnerability | CVSS3: 6.5 | 11% Средний | около 3 лет назад |
| GHSA-2h9c-34v6-3qmr Kubernetes in OpenShift3 Access Control Misconfiguration | CVSS3: 3.1 | 0% Низкий | около 3 лет назад |
| GHSA-mqf3-28j7-3mj6 Information Exposure in Kubernetes | CVSS3: 5.3 | 0% Низкий | около 3 лет назад |
| GHSA-34jx-wx69-9x8v Symlink Attack in kubectl cp | CVSS3: 5.5 | 49% Средний | больше 3 лет назад |
| GHSA-wqwf-x5cj-rg56 Kubernetes Arbitrary Command Injection | CVSS3: 5.9 | 1% Низкий | больше 3 лет назад |
| GHSA-2575-pghm-6qqx Kubernetes Unsafe Cacheing | CVSS3: 5 | 0% Низкий | больше 3 лет назад |
| GHSA-579h-mv94-g4gp Privilege Escalation in Kubernetes | CVSS3: 9.8 | 90% Критический | больше 3 лет назад |
| GHSA-wqv3-8cm6-h6wg Improper Authentication in Kubernetes | CVSS3: 8.8 | 25% Средний | больше 3 лет назад |
| GHSA-x6mj-w4jf-jmgw Server Side Request Forgery (SSRF) in Kubernetes | CVSS3: 6.3 | 14% Средний | больше 3 лет назад |
Уязвимостей на страницу