← Back

CVE-2019-11245

nvd nist
Published: Aug 29, 2019Modified: Jun 17, 2026

JSON object

Loading...
7.8
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

In kubelet v1.13.6 and v1.14.2, containers for pods that do not specify an explicit runAsUser attempt to run as uid 0 (root) on container restart, or if the image was previously pulled to the node. If the pod specified mustRunAsNonRoot: true, the kubelet will refuse to start the container as root. If the pod did not specify mustRunAsNonRoot: true, the kubelet will run the container as uid 0.

Affected (2)

Kubernetes
1 product
Kubernetes
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Kubernetes
Kubernetes
Version 1.13.6
Kubernetes
Version 1.14.2

Related CWEs

CWE-264
CWE-264
CWE-703
Improper Check or Handling of Exceptional Conditions
The product does not properly anticipate or handle exceptional conditions that rarely occur during normal operation of the product.

References (4)

Source: jordan@liggitt.net
ExploitPatchThird Party Advisory
Source: jordan@liggitt.net
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.