漏洞信息详情
Kubernetes 输入验证错误漏洞
- CNNVD编号：CNNVD-201911-1035
- 危害等级： 中危
- CVE编号： CVE-2019-11255
- 漏洞类型： 输入验证错误
- 发布时间： 2019-11-15
- 威胁类型： 远程
- 更新时间： 2021-05-14
- 厂 商：
- 漏洞来源： Red Hat
漏洞简介
Kubernetes是美国Linux基金会的一套开源的Docker容器集群管理系统。该系统为容器化的应用提供资源调度、部署运行、服务发现和扩容缩容等功能。
Kubernetes中存在输入验证错误漏洞。攻击者可利用该漏洞绕过访问限制，获取敏感信息。
漏洞公告
目前厂商已发布升级补丁以修复漏洞，补丁获取链接：
https://github.com/kubernetes/kubernetes/issues/85233
参考网址
来源:MLIST
链接:https://groups.Google.com/forum/#!topic/kubernetes-security-announce/aXiYN0q4uIw
来源:REDHAT
链接:https://access.redhat.com/errata/RHSA-2019:4225
来源:REDHAT
链接:https://access.redhat.com/errata/RHSA-2019:4054
来源:REDHAT
链接:https://access.redhat.com/errata/RHSA-2019:4099
来源:github.com
链接:https://github.com/kubernetes/kubernetes/issues/85233
来源:REDHAT
链接:https://access.redhat.com/errata/RHSA-2019:4096
来源:CONFIRM
链接:https://security.netapp.com/advisory/ntap-20200810-0003/
来源:access.redhat.com
链接:https://access.redhat.com/errata/RHSA-2019:4055
来源:access.redhat.com
链接:https://access.redhat.com/errata/RHSA-2019:4054
来源:access.redhat.com
链接:https://access.redhat.com/errata/RHSA-2019:4053
来源:access.redhat.com
链接:https://access.redhat.com/errata/RHSA-2019:4052
来源:access.redhat.com
链接:https://access.redhat.com/errata/RHSA-2019:4087
来源:access.redhat.com
链接:https://access.redhat.com/errata/RHSA-2019:4225
来源:access.redhat.com
链接:https://access.redhat.com/errata/RHSA-2019:4089
来源:access.redhat.com
链接:https://access.redhat.com/errata/RHSA-2019:4222
来源:access.redhat.com
链接:https://access.redhat.com/errata/RHSA-2019:4101
来源:access.redhat.com
链接:https://access.redhat.com/errata/RHSA-2019:4099
来源:access.redhat.com
链接:https://access.redhat.com/errata/RHSA-2019:4098
来源:access.redhat.com
链接:https://access.redhat.com/errata/RHSA-2019:4097
来源:access.redhat.com
链接:https://access.redhat.com/errata/RHSA-2019:4096
来源:access.redhat.com
链接:https://access.redhat.com/security/cve/cve-2019-11255
来源:nvd.nist.gov
链接:https://nvd.nist.gov/vuln/detail/CVE-2019-11255
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.4639/
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/155685/Red-Hat-Security-Advisory-2019-4054-01.HTML
来源:packetstormsecurity.com
链接:https://packetstormsecurity.com/files/155696/Red-Hat-Security-Advisory-2019-4225-01.HTML
来源:www.ibm.com
链接:https://www.ibm.com/blogs/psirt/security-bulletin-vulnerabilities-in-the-python-docker-and-icp-affect-ibm-spectrum-discover/
来源:vigilance.fr
链接:https://vigilance.fr/vulnerability/Kubernetes-information-disclosure-via-Container-Storage-Interface-30883
来源:www.auscert.org.au
链接:https://www.auscert.org.au/bulletins/ESB-2019.4687.3/
受影响实体
暂无
补丁
- Google Kubernetes 输入验证错误漏洞的修复措施
评论