PT-2019-11293 · Kubernetes+1 · Kubectl+1
Ariel Zelivansky
·
Publicado
2019-04-01
·
Atualizado
2025-08-08
·
CVE-2019-1002101
CVSS v3.1
6.4
Média
| Vetor | AV:N/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
kubectl versions prior to 1.11.9
kubectl versions prior to 1.12.7
kubectl versions prior to 1.13.5
kubectl versions prior to 1.14.0
Description:
The issue arises from the
kubectl cp command, which allows copying files between containers and the user machine. When copying files from a container, Kubernetes creates a tar inside the container, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in the container is malicious, it could run any code and output unexpected, malicious results. An attacker could use this to write files to any path on the user’s machine when kubectl cp is called, limited only by the system permissions of the local user. The untar function can both create and follow symbolic links.Recommendations:
For versions prior to 1.11.9, update to version 1.11.9 or later.
For versions prior to 1.12.7, update to version 1.12.7 or later.
For versions prior to 1.13.5, update to version 1.13.5 or later.
For versions prior to 1.14.0, update to version 1.14.0 or later.
Exploit
Correção
Link Following
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Alt Linux
Kubectl