The Vigil@nce team watches public vulnerabilities impacting your computers, and then offers security solutions, a vigilance database and tools to fix them.

Computer vulnerabilities of Kubernetes

Kubernetes: infinite loop via Json/yaml Decoding
An attacker can trigger an infinite loop via Json/yaml Decoding of Kubernetes, in order to trigger a denial of service...
1167142, 83253, CVE-2019-11253, VIGILANCE-VUL-30640
Kubernetes: directory traversal via Kubectl Symlinks
An attacker can traverse directories via Kubectl Symlinks of Kubernetes, in order to create a file outside the service root path...
1274986, CVE-2019-11251, VIGILANCE-VUL-30362
Kubernetes: information disclosure via Bearer Tokens
An attacker can bypass access restrictions to data via Bearer Tokens of Kubernetes, in order to obtain sensitive information...
81114, CVE-2019-11250, FEDORA-2019-2b8ef08c95, VIGILANCE-VUL-30148
Kubernetes: information disclosure via /debug/pprof
An attacker can bypass access restrictions to data via /debug/pprof of Kubernetes, in order to obtain sensitive information...
CVE-2019-11248, FEDORA-2019-2b8ef08c95, VIGILANCE-VUL-30147
HTTP/2: multiple vulnerabilities
An attacker can use several vulnerabilities of HTTP/2...
1072144, 1072860, 1167160, 6198380, 6369095, bulletinoct2019, CERTFR-2019-AVI-389, cpuapr2020, cpujan2021, cpuoct2020, CVE-2019-9511, CVE-2019-9512, CVE-2019-9513, CVE-2019-9514, CVE-2019-9515, CVE-2019-9516, CVE-2019-9517, CVE-2019-9518, DLA-2485-1, DSA-4503-1, DSA-4505-1, DSA-4508-1, DSA-4511-1, DSA-4520-1, DSA-4669-1, FEDORA-2019-1686ae9b59, FEDORA-2019-5a6a7bc12c, FEDORA-2019-63ba15cc83, FEDORA-2019-7443ebda4b, FEDORA-2019-81985a8858, FEDORA-2019-8a437d5c2f, FEDORA-2019-befd924cfe, FEDORA-2021-d5b2c18fe6, HT210436, NFLX-2019-002, openSUSE-SU-2019:2000-1, openSUSE-SU-2019:2051-1, openSUSE-SU-2019:2056-1, openSUSE-SU-2019:2072-1, openSUSE-SU-2019:2085-1, openSUSE-SU-2019:2114-1, openSUSE-SU-2019:2115-1, openSUSE-SU-2019:2120-1, openSUSE-SU-2019:2130-1, openSUSE-SU-2019:2232-1, openSUSE-SU-2019:2234-1, openSUSE-SU-2019:2264-1, RHSA-2019:2692-01, RHSA-2019:2726-01, RHSA-2019:2745-01, RHSA-2019:2746-01, RHSA-2019:2775-01, RHSA-2019:2799-01, RHSA-2019:2893-01, RHSA-2019:2925-01, RHSA-2019:2939-01, RHSA-2019:2949-01, RHSA-2019:2955-01, RHSA-2019:4018-01, RHSA-2019:4019-01, RHSA-2019:4020-01, RHSA-2019:4021-01, RHSA-2019:4040-01, RHSA-2019:4041-01, RHSA-2019:4042-01, RHSA-2019:4045-01, RHSA-2019:4269-01, RHSA-2019:4273-01, RHSA-2020:0406-01, SSA:2020-091-02, SUSE-SU-2019:2213-1, SUSE-SU-2019:2214-1, SUSE-SU-2019:2237-1, SUSE-SU-2019:2254-1, SUSE-SU-2019:2259-1, SUSE-SU-2019:2260-1, SUSE-SU-2019:2309-1, SUSE-SU-2019:2329-1, SUSE-SU-2019:2473-1, SUSE-SU-2019:2559-1, SUSE-SU-2020:0059-1, Synology-SA-19:33, Synology-SA-19:37, USN-4099-1, USN-4113-1, USN-4113-2, USN-4308-1, VIGILANCE-VUL-30040, VU#605641
Kubernetes: file creation via Kubectl Cp
A local attacker can create or overwrite a file when "kubectl cp" is used...
1167154, 80984, CVE-2019-11249, FEDORA-2019-2b8ef08c95, VIGILANCE-VUL-29949
Kubernetes: read-write access via API Server Cluster-scoped Resource
An attacker can bypass access restrictions via API Server Cluster-scoped Resource of Kubernetes, in order to read or alter data...
1167154, 80983, CVE-2019-11247, FEDORA-2019-2b8ef08c95, VIGILANCE-VUL-29948
Kubernetes: directory traversal via kubectl cp
An attacker can traverse directories via kubectl cp of Kubernetes, in order to read a file outside the service root path...
CVE-2019-11246, FEDORA-2019-2b8ef08c95, ibm10960606, VIGILANCE-VUL-29589
Kubernetes kubelet: privilege escalation via Root Uid Container
An attacker can bypass restrictions via Root Uid Container of Kubernetes kubelet, in order to escalate his privileges...
CVE-2019-11245, VIGILANCE-VUL-29443
Kubernetes: wrong access right assignement to cached files
When a user specifies a world writable folder as cache, Kubernetes creates new files as world writable. A local attacker can read and write to the user files...
76676, CVE-2019-11244, VIGILANCE-VUL-29125
Our database contains other pages. You can request a free trial to read them.

Display information about Kubernetes: