CVE-2017-1002101
high · 8.8In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host's filesystem.
8.8
CVSS
13.3%
EPSS (exploit prob.)
96th
EPSS percentile
2018-03-13
Published
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-59
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| kubernetes | kubernetes | >= 1.3.0, <= 1.3.10 |
| kubernetes | kubernetes | >= 1.4.0, <= 1.4.12 |
| kubernetes | kubernetes | >= 1.5.0, <= 1.5.8 |
| kubernetes | kubernetes | >= 1.6.0, <= 1.6.13 |
| kubernetes | kubernetes | >= 1.7.0, < 1.7.14 |
| kubernetes | kubernetes | >= 1.8.0, < 1.8.9 |
| kubernetes | kubernetes | >= 1.9.0, < 1.9.4 |
Check a specific version with /api/v1/cve/match.
References
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html
- https://access.redhat.com/errata/RHSA-2018:0475
- https://github.com/bgeesaman/subpath-exploit/
- https://github.com/kubernetes/kubernetes/issues/60813
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html
- https://access.redhat.com/errata/RHSA-2018:0475
- https://github.com/bgeesaman/subpath-exploit/
- https://github.com/kubernetes/kubernetes/issues/60813
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2017-1002101