p PatchFirst

CVE-2019-11251

CVE-2019-11251 · kubectl cp allows symlink directory traversal

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The Kubernetes kubectl cp command in versions 1.1-1.12, and versions prior to 1.13.11, 1.14.7, and 1.15.4 allows a combination of two symlinks provided by tar output of a malicious container to place a file outside of the destination directory specified in the kubectl cp invocation. This could be used to allow an attacker to place a nefarious file using a symlink, outside of the destination tree.

CVSS 4.8 · Medium · EPSS 2.6%

Published
Updated

Stack: containers

Affected products and versions

  • kubernetes

    Versions
    • prior to 1.13.11: Affected
    • prior to 1.14.7: Affected
    • prior to 1.15.4: Affected
    • 1.1: Affected
    • 1.2: Affected
    • 1.3: Affected
    • 1.4: Affected
    • 1.5: Affected
    • 1.6: Affected
    • 1.7: Affected
    • 1.8: Affected
    • 1.9: Affected
    • 1.10: Affected
    • 1.11: Affected
    • 1.12: Affected

    No fix published

Original sources

Check your server →