CVE-2019-11245

原始描述

In kubelet v1.13.6 and v1.14.2, containers for pods that do not specify an explicit runAsUser attempt to run as uid 0 (root) on container restart, or if the image was previously pulled to the node. If the pod specified mustRunAsNonRoot: true, the kubelet will refuse to start the container as root. If the pod did not specify mustRunAsNonRoot: true, the kubelet will run the container as uid 0.

受影响的软件

• Kubernetes = 1.14.2= 1.13.6 精确匹配

详情

发布日期

2019-08-29

最后修改

2024-09-17

CVSS 向量

CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

CWE

CWE-703

参考资料

• cve.org/CVE-2019-11245
• nvd.nist.gov/vuln/detail/CVE-2019-11245
• github.com/kubernetes/kubernetes/issues/78308
• security.netapp.com/advisory/ntap-20190919-0003/