Lucene search
PRIOn knowledge basePRION:CVE-2018-1002100HistoryJun 02, 2018 - 1:29 a.m.
Command injection
2018-06-0201:29:00
PRIOn knowledge base
www.prio-n.com
2
In Kubernetes versions 1.5.x, 1.6.x, 1.7.x, 1.8.x, and prior to version 1.9.6, the kubectl cp command insecurely handles tar data returned from the container, and can be caused to overwrite arbitrary local files.
| CPE | Name | Operator | Version |
|---|---|---|---|
| kubernetes | ge | 1.9.0 | |
| kubernetes | le | 1.9.5 | |
| kubernetes | ge | 1.8.0 | |
| kubernetes | le | 1.8.15 | |
| kubernetes | ge | 1.7.0 | |
| kubernetes | le | 1.7.17 | |
| kubernetes | ge | 1.6.0 | |
| kubernetes | le | 1.6.14 | |
| kubernetes | ge | 1.5.0 | |
| kubernetes | le | 1.5.9 |
Related
redhatcve
redhatcve
CVE-2018-1002100
2018-04-13 17:20:22
osv
osv
CVE-2018-1002100
2018-06-02 01:29:02
Kubernetes arbitrary file overwrite
2022-05-13 01:35:04
debiancve
debiancve
CVE-2018-1002100
2022-10-03 16:21:40
cvelist
cvelist
CVE-2018-1002100
2022-10-03 16:21:40
nvd
nvd
CVE-2018-1002100
2018-06-02 01:29:02
cve
cve
CVE-2018-1002100
2022-10-03 16:21:40
github
github
Kubernetes arbitrary file overwrite
2022-05-13 01:35:04
ubuntucve
ubuntucve
CVE-2018-1002100
2018-06-02 00:00:00
veracode
veracode
Directory Traversal
2018-04-16 04:45:43
nessus
nessus
RHEL 7 : kubernetes (Unpatched Vulnerability)
2024-05-11 00:00:00
RHEL 7 : kubernetes (Unpatched Vulnerability)
2024-06-03 00:00:00