CVE-2017-1002101
CVE-2017-1002101
This page contains facts from public vulnerability sources. Check the original advisory before updating.
In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host's filesystem.
CVSS 8.8 · High · EPSS 13.3% · Fix available
- Published
- Updated
Stack: system · containers
Affected products and versions
kubernetes
- Versions
- v1.3.x: Affected
- v1.4.x: Affected
- v1.5.x: Affected
- v1.6.x: Affected
- ≥ unspecified, < v1.7.14: Affected (custom)
- ≥ unspecified, < v1.8.9: Affected (custom)
- ≥ unspecified, < v1.9.4: Affected (custom)
Update to v1.7.14
kubernetes Debian:12
- Affected ranges
- ECOSYSTEM: < 1.7.16+dfsg-1
Update to 1.7.16+dfsg-1
kubernetes Debian:13
- Affected ranges
- ECOSYSTEM: < 1.7.16+dfsg-1
Update to 1.7.16+dfsg-1
kubernetes Debian:14
- Affected ranges
- ECOSYSTEM: < 1.7.16+dfsg-1
Update to 1.7.16+dfsg-1