CVE-2019-11246
Last modified
CVE-2019-11246 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s machine. EPSS estimates a 3.62% chance of exploitation in the next 30 days.
Description
The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in the container is malicious, it could run any code and output unexpected, malicious results. An attacker could use this to write files to any path on the user’s machine when kubectl cp is called, limited only by the system permissions of the local user. Kubernetes affected versions include versions prior to 1.12.9, versions prior to 1.13.6, versions prior to 1.14.2, and versions 1.1, 1.2, 1.4, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 1.10, 1.11.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Kubernetes | Kubernetes | >= 1.0.0, <= 1.12.10 | — |
| Kubernetes | Kubernetes | >= 1.13.0, < 1.13.9 | — |
| Kubernetes | Kubernetes | >= 1.14.0, < 1.14.5 | — |
| Kubernetes | Kubernetes | >= 1.15.0, < 1.15.2 | — |
| Kubernetes | Kubernetes | 1.12.11 | Beta0 |
References
- https://github.com/kubernetes/kubernetes/pull/76788Patch, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20190919-0003/Third Party Advisory
- https://github.com/kubernetes/kubernetes/pull/76788Patch, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20190919-0003/Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-11246?
How severe is CVE-2019-11246?
How do I fix CVE-2019-11246?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-11236In the urllib3 library through 1.24.1 for Python, CRLF injec…
- CVE-2019-1124A remote code execution vulnerability exists in the way that…
- CVE-2019-11242A man-in-the-middle vulnerability related to vCenter access …
- CVE-2019-11243In Kubernetes v1.12.0-v1.12.4 and v1.13.0, the rest.Anonymou…8.1
- CVE-2019-11244In Kubernetes v1.8.x-v1.14.x, schema info is cached by kubec…5
- CVE-2019-11245In kubelet v1.13.6 and v1.14.2, containers for pods that do …4.9
- CVE-2019-11247The Kubernetes kube-apiserver mistakenly allows access to a …8.1
- CVE-2019-11248The debugging endpoint /debug/pprof is exposed over the unau…8.2
- CVE-2019-11249The kubectl cp command allows copying files between containe…6.5
- CVE-2019-1125An information disclosure vulnerability exists when certain …5.6
- CVE-2019-11250The Kubernetes client-go library logs request headers at ver…6.5
- CVE-2019-11251The Kubernetes kubectl cp command in versions 1.1-1.12, and …5.7
Are you affected by CVE-2019-11246?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST