onyx --cves cve-2018-1002105
CVE-2018-1002105
- score
- <0.1
- cvss
- 9.8
- epss
- 87.0%
- published
- 2018-12-05
- kev added
- —
- first seen
Kubernetes < v1.10.11, < v1.11.5, < v1.12.3 contains a security flaw caused by incorrect error response handling to proxied upgrade requests in kube-apiserver, letting attackers establish connections to backend servers and send arbitrary requests over the same connection, exploit requires crafted requests.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
- Public PoC https://www.exploit-db.com/exploits/46052/
Exploit availability
Weaknesses
References 20
- http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html
- http://www.openwall.com/lists/oss-security/2019/07/06/4
- https://www.coalfire.com/The-Coalfire-Blog/December-2018/Kubernetes-Vulnerability-What-You-Can-Should-Do
- https://groups.google.com/forum/#%21topic/kubernetes-announce/GVllWCg6L88
- https://www.exploit-db.com/exploits/46052/
- http://www.securityfocus.com/bid/106068
- https://access.redhat.com/errata/RHSA-2018:3598
- https://access.redhat.com/errata/RHSA-2018:3742
- https://access.redhat.com/errata/RHSA-2018:3754
- https://security.netapp.com/advisory/ntap-20190416-0001/
- https://www.exploit-db.com/exploits/46053/
- http://www.openwall.com/lists/oss-security/2019/06/28/2
- https://access.redhat.com/errata/RHSA-2018:3537
- https://access.redhat.com/errata/RHSA-2018:3549
- https://github.com/evict/poc_CVE-2018-1002105
- https://github.com/kubernetes/kubernetes/issues/71411
- http://www.openwall.com/lists/oss-security/2019/07/06/3
- https://access.redhat.com/errata/RHSA-2018:3551
- https://access.redhat.com/errata/RHSA-2018:3624
- https://access.redhat.com/errata/RHSA-2018:3752