CVEvulnerability
CVE-2018-1002105
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-12-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-388
Description
In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server's TLS credentials used to establish the backend connection.
Affected configurations
• kubernetes kubernetes (>= 1.0.0 <= 1.9.11)
• kubernetes kubernetes (>= 1.10.0 <= 1.10.10)
• kubernetes kubernetes (>= 1.11.0 <= 1.11.4)
• kubernetes kubernetes (>= 1.12.0 <= 1.12.2)
• kubernetes kubernetes 1.9.12
• redhat openshift container platform 3.2
• redhat openshift container platform 3.3
• redhat openshift container platform 3.4
• redhat openshift container platform 3.5
• redhat openshift container platform 3.6
• redhat openshift container platform 3.8
• redhat openshift container platform 3.10
• redhat openshift container platform 3.11
• netapp trident
Related
Weakness · not in database (1)
References
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html lists.opensuse.org
- http://www.openwall.com/lists/oss-security/2019/06/28/2 www.openwall.com
- http://www.openwall.com/lists/oss-security/2019/07/06/3 www.openwall.com
- http://www.openwall.com/lists/oss-security/2019/07/06/4 www.openwall.com
- http://www.securityfocus.com/bid/106068 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:3537 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3549 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3551 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3598 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3624 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3742 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3752 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3754 Third Party Advisory
- https://github.com/evict/poc_CVE-2018-1002105 Exploit, Third Party Advisory
- https://github.com/kubernetes/kubernetes/issues/71411 Issue Tracking, Mitigation, Patch, Third Party Advisory
- https://groups.google.com/forum/#%21topic/kubernetes-announce/GVllWCg6L88 groups.google.com
- https://security.netapp.com/advisory/ntap-20190416-0001/ Third Party Advisory
- https://www.coalfire.com/The-Coalfire-Blog/December-2018/Kubernetes-Vulnerability-What-You-Can-Should-Do Mitigation, Third Party Advisory
- https://www.exploit-db.com/exploits/46052/ Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/46053/ Exploit, Third Party Advisory, VDB Entry
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html lists.opensuse.org
- http://www.openwall.com/lists/oss-security/2019/06/28/2 www.openwall.com
- http://www.openwall.com/lists/oss-security/2019/07/06/3 www.openwall.com
- http://www.openwall.com/lists/oss-security/2019/07/06/4 www.openwall.com
- http://www.securityfocus.com/bid/106068 Third Party Advisory, VDB Entry
- https://access.redhat.com/errata/RHSA-2018:3537 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3549 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3551 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3598 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3624 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3742 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3752 Third Party Advisory
- https://access.redhat.com/errata/RHSA-2018:3754 Third Party Advisory
- https://github.com/evict/poc_CVE-2018-1002105 Exploit, Third Party Advisory
- https://github.com/kubernetes/kubernetes/issues/71411 Issue Tracking, Mitigation, Patch, Third Party Advisory
- https://groups.google.com/forum/#%21topic/kubernetes-announce/GVllWCg6L88 groups.google.com
- https://security.netapp.com/advisory/ntap-20190416-0001/ Third Party Advisory
- https://www.coalfire.com/The-Coalfire-Blog/December-2018/Kubernetes-Vulnerability-What-You-Can-Should-Do Mitigation, Third Party Advisory
- https://www.exploit-db.com/exploits/46052/ Exploit, Third Party Advisory, VDB Entry
- https://www.exploit-db.com/exploits/46053/ Exploit, Third Party Advisory, VDB Entry