10237 matches found
kubernetes security update
kubernetes 1.9.11-2.2.1 - CVE-2019-6486 1.9.11-2.1.1 - Fix kubeadm-registry.sh - Use golang 1.9.3 - CVE-2018-1002105 Handle error responses from backends - Bump to v1.9.11 1.9.1-2.1.7 - Orabug 27803001 1.9.1-2.1.5 - Production built 1.9.1-2.1.5 - Fix the upgrade version check - Remove w/a from...
Internet Bug Bounty: CVE-2019-5736: Escape from Docker and Kubernetes containers to root on host
description here: https://blog.dragonsector.pl/2019/02/cve-2019-5736-escape-from-docker-and.html PoC: https://github.com/q3k/cve-2019-5736-poc Some more links: https://seclists.org/oss-sec/2019/q1/119 https://access.redhat.com/security/cve/cve-2019-5736 Impact It allows to escape from container t...
Major Container Security Flaw Threatens Cascading Attacks
runc, a building-block project for the container technologies used by many enterprises as well as public cloud providers, has patched a vulnerability that would allow root-level code-execution, container escape and access to the host filesystem. Discovered by researchers Adam Iwaniuk and Borys...
RunC Flaw Lets Attackers Escape Linux Containers to Gain Root on Hosts
A serious security vulnerability has been discovered in the core runC container code that affects several open-source container management systems, potentially allowing attackers to escape Linux container and obtain unauthorized, root-level access to the host operating system. The vulnerability,...
RunC Flaw Lets Attackers Escape Linux Containers to Gain Root on Hosts
A serious security vulnerability has been discovered in the core runC container code that affects several open-source container management systems, potentially allowing attackers to escape Linux container and obtain unauthorized, root-level access to the host operating system. The vulnerability,...
Photon OS 2.0: Kubernetes PHSA-2018-2.0-0112
An update of the kubernetes package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2018-2.0-0112. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...
Photon OS 1.0: Kubernetes PHSA-2019-1.0-0202
An update of the kubernetes package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0202. The text itself is copyright C VMware, Inc. include"compat.inc"; if description...
Code injection
The kube-rbac-proxy container before version 0.4.1 as used in Red Hat OpenShift Container Platform does not honor TLS configurations, allowing for use of insecure ciphers and TLS 1.0. An attacker could target traffic sent over a TLS connection with a weak configuration and potentially break the...
Kubernetes Web API Detection
Binary data kuberneteswebapidetect.nbin...
PT-2019-12209 · Kubernetes +1 · Kubernetes +1
Name of the Vulnerable Software and Affected Versions: Kubernetes versions 1.12.0 through 1.12.4 Kubernetes version 1.13.0 Description: The issue concerns the rest.AnonymousClientConfig method, which is supposed to return a copy of the provided config with credentials removed. However, in the...
Privilege Escalation
github.com/kubernetes/kubernetes is vulnerable to privilege escalation. Authenticated users are able to directly access a backend server through the Kubernetes API server using specially crafted requests. A remote attacker who is authenticated to the Kubernetes API server only will be able to sen...
Directory Traversal
github.com/kubernetes/kubernetes is vulnerable to directory traversal attacks. Containers using subpath volume mounts can access files and directories outside of the volume, this includes other files on the hosts' system...
Remote Code Execution (RCE)
github.com/kubernetes/dns leverages the dnsmasq library which is vulnerable to a heap-based buffer overflow. An attacker could cause a denial of service or execute arbitrary code via crafted DNS response. This issue in dnsmasq has been assigned CVE-2017-14491...
Information Disclosure
github.com/openshift/origin is vulnerable to information disclosure. The vulnerability is possible because kubernetes watch cache does not return the correct data in a multi tenant environment, revealing the data of a user to another user...
Path Traversal
github.com/kubernetes/kubernetes is vulnerable to path traversal attacks. The attacks are possible because it does not validate the names of all object types ObjectMeta in BeforeCreate before passing them to etcd to generate etcd key...
Security Bulletin: A Security Vulnerability could affect IBM Cloud Private
Summary IBM Cloud Private could allow a remote attacker to bypass security restrictions due to Calico CNI Logging which can expose Kubernetes service account tokens Vulnerability Details CVEID: Not Applicable DESCRIPTION: Project Calico could allow a local attacker to obtain sensitive information...
Kube-Hunter - Hunt For Security Weaknesses In Kubernetes Clusters
Kube-hunter hunts for security weaknesses in Kubernetes clusters. The tool was developed to increase awareness and visibility for security issues in Kubernetes environments. You should NOT run kube-hunter on a Kubernetes cluster you don't own! Run kube-hunter : kube-hunter is available as a...
Moderate: Red Hat Bug Fix Advisory: OpenShift Container Platform 3.9 bug fix and enhancement update
Red Hat OpenShift Container Platform release 3.9.60 is now available with updates to packages and images that fix several bugs and add enhancements. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud...
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0120
An update of 'systemd', 'python3', 'kubernetes-dashboard' packages of Photon OS has been released...