Kubernetes vulnerabilities
107 CVEs and advisories name Kubernetes as an affected vendor, newest first. Follow it as a feed.
- CVE-2021-25742Ingress-nginx custom snippets allows retrieval of ingress-nginx serviceaccount token and secrets across all namespaces
- CVE-2021-25738Code exec via yaml parsing
- CVE-2021-25741Symlink Exchange Can Allow Host Filesystem Access
- CVE-2021-25740Holes in EndpointSlice Validation Enable Host Network Hijack
- CVE-2020-8561Webhook redirect in kube-apiserver
- CVE-2021-25737Holes in EndpointSlice Validation Enable Host Network Hijack
- CVE-2021-25735Validating Admission Webhook does not observe some previous fields
- CVE-2020-8570Kubernetes Java client libraries unvalidated path traversal in Copy implementation
- CVE-2020-8569Kubernetes CSI snapshot-controller DoS
- CVE-2020-8568Kubernetes Secrets Store CSI Driver sync/rotate directory traversal
- CVE-2020-8567Kubernetes Secrets Store CSI Driver plugin directory traversals
- CVE-2020-8554Kubernetes man in the middle using LoadBalancer or ExternalIPs
- CVE-2020-8563Secret leaks in logs for vSphere Provider kube-controller-manager
- CVE-2020-8564Docker config secrets leaked when file is malformed and loglevel >= 4
- CVE-2020-8565Incomplete fix for CVE-2019-11250 allows for token leak in logs when logLevel >= 9
- CVE-2020-8566Ceph RBD adminSecrets exposed in logs when loglevel >= 4
- CVE-2020-8553Kubernetes ingress-nginx Compromise of auth via subset/superset namespace names
- CVE-2020-8558Kubernetes node setting allows for neighboring hosts to bypass localhost boundary
- CVE-2020-8557Kubernetes node disk Denial of Service by writing to container /etc/hosts
- CVE-2019-11252Credential leakage when failing to mount
- CVE-2020-8559Privilege escalation from compromised node to cluster
- CVE-2020-8555Kubernetes kube-controller-manager SSRF
- CVE-2019-11254Kubernetes API Server denial of service vulnerability from malicious YAML payloads
- CVE-2020-8552Kubernetes API server denial of service
- CVE-2020-8551Kubernetes kubelet denial of service
- CVE-2019-11251kubectl cp allows symlink directory traversal
- CVE-2018-1002104Versions < 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly.
- CVE-2019-11255Kubernetes CSI volume snapshot, cloning and resizing features can result in unauthorized volume data access or mutation
- CVE-2018-1002102Kubernetes API server follows unvalidated redirects from streaming Kubelet endpoints
- CVE-2019-11253Kubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack