UBUNTU-CVE-2018-1002100

Advisory lineage Upstream: 1 Downstream: 0
Published: 02 Jun 2018, 01:29
Last modified:14 Jul 2025, 06:33

Vulnerability Summary

Overall Risk (default)
low
22/100
CVSS Score
5.5 MEDIUM
3.0 (osv_ubuntu)
EPSS Score
No data
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

02 Jun 2018, 01:29
Published
Vulnerability first disclosed
14 Jul 2025, 06:33
Last Modified
Vulnerability information updated

Description

In Kubernetes versions 1.5.x, 1.6.x, 1.7.x, 1.8.x, and prior to version 1.9.6, the kubectl cp command insecurely handles tar data returned from the container, and can be caused to overwrite arbitrary local files.

CVSS Metrics

  • v3.0•MEDIUM•Score: 5.5CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Affected Systems

  • ubuntu•kubernetes

    all | all | all

References (4)