Linux Foundation · Kubernetes · CVE-2017-1002101
**Name of the Vulnerable Software and Affected Versions**
Kubernetes versions 1.3.x through 1.6.x
Kubernetes versions 1.7.x through 1.7.13
Kubernetes versions 1.8.x through 1.8.8
Kubernetes versions 1.9.x through 1.9.3
**Description**
The issue allows containers using subpath volume mounts to access files and directories outside of the volume, including the host's filesystem, due to a flaw in Kubernetes. This affects containers with any volume type, including non-privileged pods, subject to file permissions.
**Recommendations**
For Kubernetes versions 1.3.x through 1.6.x, update to version 1.7.14 or later.
For Kubernetes versions 1.7.x through 1.7.13, update to version 1.7.14 or later.
For Kubernetes versions 1.8.x through 1.8.8, update to version 1.8.9 or later.
For Kubernetes versions 1.9.x through 1.9.3, update to version 1.9.4 or later.