PT-2019-12215 · Linux Foundation+1 · Kubernetes+1
Published
2019-08-13
·
Updated
2020-10-02
·
CVE-2019-11249
CVSS v2.0
5.8
Medium
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Kubernetes versions prior to 1.13.9
Kubernetes versions prior to 1.14.5
Kubernetes versions prior to 1.15.2
Kubernetes versions 1.1, 1.2, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 1.10, 1.11, 1.12
Description
The issue arises from the kubectl cp command, which allows copying files between containers and the user machine. When copying files from a container, Kubernetes uses tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in the container is malicious, it could run any code and output unexpected, malicious results. This could allow an attacker to write files to any path on the user’s machine when kubectl cp is called, limited only by the system permissions of the local user.
Recommendations
For versions prior to 1.13.9, update to version 1.13.9 or later.
For versions prior to 1.14.5, update to version 1.14.5 or later.
For versions prior to 1.15.2, update to version 1.15.2 or later.
For versions 1.1, 1.2, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 1.10, 1.11, 1.12, update to a version that is not vulnerable, such as 1.13.9 or later.
Exploit
Fix
Path traversal
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Kubernetes