CVE-2018-1002105 Kubernetes priviledge escalation
Bug #1806749 reported by
Bruce Jones
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| StarlingX |
Fix Released
|
Medium
|
Frank Miller | ||
Bug Description
A CVSS 9.8 issue has been found in Kubernetes.
https:/
https:/
CVE References
| tags: | added: stx.security |
Revision history for this message
| Ken Young (kenyis) wrote | #1 |
| Changed in starlingx: | |
| importance: | Undecided → Medium |
| status: | New → Triaged |
| assignee: | nobody → Frank Miller (sensfan22) |
| tags: | added: stx.2019.03 |
Revision history for this message
| Frank Miller (sensfan22) wrote | #2 |
| tags: |
added: stx.2019.05 removed: stx.2019.03 |
Revision history for this message
| Frank Miller (sensfan22) wrote | #3 |
| Changed in starlingx: | |
| status: | Triaged → Fix Released |
| tags: |
added: stx.2.0 removed: stx.2019.05 |
| information type: | Private Security → Public |
To post a comment you must log in.
Assigning to Frank Miller, the containers team lead, to plan further how this CVE will be addressed. Given K8s is not part of the main code of Starling X yet, the plan to fix this code is up to the containers team. The ask from the security team is to correct this CVE before the release is complete.