CVE-2018-1002105

CRITICAL9.8EPSS 90.2%

Privilege Escalation in Kubernetes

發布日:2022/2/15修改日:2026/2/4

也稱為:GHSA-579h-mv94-g4gpCGA-pr5q-v7cv-4h5gDEBIAN-CVE-2018-1002105GO-2022-0792

描述

In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server's TLS credentials used to establish the backend connection.

受影響套件(3)

Debian/kubernetesfrom 0, < 1.17.4-1
Go/github.com/kubernetes/kubernetesfrom 0, < 1.10.11
Go/github.com/kubernetes/kubernetesfrom 0, < 1.10.11, >= 1.11.0, < 1.11.5, >= 1.12.0, < 1.12.3

CVSS 分數

來源	版本	嚴重程度	向量
osv	CVSS 3.1	CRITICAL9.8	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

參考連結(24)

ADVISORYhttps://github.com/advisories/GHSA-579h-mv94-g4gp
ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2018-1002105
ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2018-1002105
WEBhttps://access.redhat.com/errata/RHSA-2018:3537
WEBhttps://access.redhat.com/errata/RHSA-2018:3549
WEBhttps://access.redhat.com/errata/RHSA-2018:3551
WEBhttps://access.redhat.com/errata/RHSA-2018:3598
WEBhttps://access.redhat.com/errata/RHSA-2018:3624
WEBhttps://access.redhat.com/errata/RHSA-2018:3742
WEBhttps://access.redhat.com/errata/RHSA-2018:3752
WEBhttps://access.redhat.com/errata/RHSA-2018:3754
WEBhttps://github.com/evict/poc_CVE-2018-1002105
WEBhttps://github.com/kubernetes/kubernetes/commit/2257c1ecbe3c0cf71dd50b82752ae189c94ec905
WEBhttps://github.com/kubernetes/kubernetes/issues/71411
WEBhttps://groups.google.com/forum/#!topic/kubernetes-announce/GVllWCg6L88
WEBhttps://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html
WEBhttps://security.netapp.com/advisory/ntap-20190416-0001
WEBhttps://www.coalfire.com/The-Coalfire-Blog/December-2018/Kubernetes-Vulnerability-What-You-Can-Should-Do
WEBhttps://www.exploit-db.com/exploits/46052
WEBhttps://www.exploit-db.com/exploits/46053
WEBhttps://www.openwall.com/lists/oss-security/2019/06/28/2
WEBhttps://www.openwall.com/lists/oss-security/2019/07/06/3
WEBhttps://www.openwall.com/lists/oss-security/2019/07/06/4
WEBhttps://www.securityfocus.com/bid/106068