CVE编号
CVE-2018-1002105利用情况
漏洞武器化补丁情况
官方补丁披露时间
2018-12-06漏洞描述
在v1.10.11，v1.11.5和v1.12.3之前的所有Kubernetes版本中，对kube-apiserver中对代理升级请求的错误响应的错误处理均不正确，从而允许特制请求通过Kubernetes API服务器建立与后端服务器的连接，然后通过同一连接直接将任意请求发送到后端，并使用用于建立后端连接的Kubernetes API服务器的TLS凭据进行身份验证。解决建议
升级Kubernetes至安全版本
参考链接 |
|
|---|---|
| http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html | |
| http://www.openwall.com/lists/oss-security/2019/06/28/2 | |
| http://www.openwall.com/lists/oss-security/2019/07/06/3 | |
| http://www.openwall.com/lists/oss-security/2019/07/06/4 | |
| http://www.securityfocus.com/bid/106068 | |
| https://access.redhat.com/errata/RHSA-2018:3537 | |
| https://access.redhat.com/errata/RHSA-2018:3549 | |
| https://access.redhat.com/errata/RHSA-2018:3551 | |
| https://access.redhat.com/errata/RHSA-2018:3598 | |
| https://access.redhat.com/errata/RHSA-2018:3624 | |
| https://access.redhat.com/errata/RHSA-2018:3742 | |
| https://access.redhat.com/errata/RHSA-2018:3752 | |
| https://access.redhat.com/errata/RHSA-2018:3754 | |
| https://github.com/evict/poc_CVE-2018-1002105 | |
| https://github.com/kubernetes/kubernetes/issues/71411 | |
| https://groups.google.com/forum/#!topic/kubernetes-announce/GVllWCg6L88 | |
| https://security.netapp.com/advisory/ntap-20190416-0001/ | |
| https://www.coalfire.com/The-Coalfire-Blog/December-2018/Kubernetes-Vulnerabi... | |
| https://www.exploit-db.com/exploits/46052/ | |
| https://www.exploit-db.com/exploits/46053/ |
受影响软件情况
| # | 类型 | 厂商 | 产品 | 版本 | 影响面 | ||||
| 1 | |||||||||
|---|---|---|---|---|---|---|---|---|---|
| 运行在以下环境 | |||||||||
| 应用 | kubernetes | kubernetes | * |
From (including) 1.0.0 |
Up to (including) 1.9.11 |
||||
| 运行在以下环境 | |||||||||
| 应用 | kubernetes | kubernetes | * |
From (including) 1.10.0 |
Up to (including) 1.10.10 |
||||
| 运行在以下环境 | |||||||||
| 应用 | kubernetes | kubernetes | * |
From (including) 1.11.0 |
Up to (including) 1.11.4 |
||||
| 运行在以下环境 | |||||||||
| 应用 | kubernetes | kubernetes | * |
From (including) 1.12.0 |
Up to (including) 1.12.2 |
||||
| 运行在以下环境 | |||||||||
| 应用 | kubernetes | kubernetes | 1.9.12 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | netapp | trident | - | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | redhat | openshift_container_platform | 3.10 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | redhat | openshift_container_platform | 3.11 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | redhat | openshift_container_platform | 3.2 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | redhat | openshift_container_platform | 3.3 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | redhat | openshift_container_platform | 3.4 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | redhat | openshift_container_platform | 3.5 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | redhat | openshift_container_platform | 3.6 | - | |||||
| 运行在以下环境 | |||||||||
| 应用 | redhat | openshift_container_platform | 3.8 | - | |||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_29 | kubeadm | * |
Up to (excluding) 3.11.1-1.fc29 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_29 | kubectl | * |
Up to (excluding) 3.11.1-1.fc29 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | fedora_29 | kubelet | * |
Up to (excluding) 3.11.1-1.fc29 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | opensuse_Leap_15.1 | kubeadm | * |
Up to (excluding) 1.14-lp151.6.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | opensuse_Leap_15.1 | kubectl | * |
Up to (excluding) 1.14-lp151.6.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | opensuse_Leap_15.1 | kubelet | * |
Up to (excluding) 1.14-lp151.6.1 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | oracle_7 | kubeadm | * |
Up to (excluding) 1.9.11-2.1.1.el7 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | oracle_7 | kubectl | * |
Up to (excluding) 1.9.11-2.1.1.el7 |
|||||
| 运行在以下环境 | |||||||||
| 系统 | oracle_7 | kubelet | * |
Up to (excluding) 1.9.11-2.1.1.el7 |
|||||
- 攻击路径 远程
- 攻击复杂度 容易
- 权限要求 无需权限
- 影响范围 全局影响
- EXP成熟度 漏洞武器化
- 补丁情况 官方补丁
- 数据保密性 数据泄露
- 数据完整性 传输被破坏
- 服务器危害 服务器失陷
- 全网数量 N/A
还没有评论，来说两句吧...