csaf_opensuse - opensuse-su-2024:10901-1

Vulnerability from csaf_opensuse

Published

2024-06-15 00:00

Modified

2024-06-15 00:00

Summary

kubernetes-apiserver-1.22.2-21.2 on GA media

Notes

Title of the patch

kubernetes-apiserver-1.22.2-21.2 on GA media

Description of the patch

These are all security issues fixed in the kubernetes-apiserver-1.22.2-21.2 package on the GA media of openSUSE Tumbleweed.

Patchnames

openSUSE-Tumbleweed-2024-10901

CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).

JSON

To clipboard

{
   document: {
      aggregate_severity: {
         namespace: "https://www.suse.com/support/security/rating/",
         text: "moderate",
      },
      category: "csaf_security_advisory",
      csaf_version: "2.0",
      distribution: {
         text: "Copyright 2024 SUSE LLC. All rights reserved.",
         tlp: {
            label: "WHITE",
            url: "https://www.first.org/tlp/",
         },
      },
      lang: "en",
      notes: [
         {
            category: "summary",
            text: "kubernetes-apiserver-1.22.2-21.2 on GA media",
            title: "Title of the patch",
         },
         {
            category: "description",
            text: "These are all security issues fixed in the kubernetes-apiserver-1.22.2-21.2 package on the GA media of openSUSE Tumbleweed.",
            title: "Description of the patch",
         },
         {
            category: "details",
            text: "openSUSE-Tumbleweed-2024-10901",
            title: "Patchnames",
         },
         {
            category: "legal_disclaimer",
            text: "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
            title: "Terms of use",
         },
      ],
      publisher: {
         category: "vendor",
         contact_details: "https://www.suse.com/support/security/contact/",
         name: "SUSE Product Security Team",
         namespace: "https://www.suse.com/",
      },
      references: [
         {
            category: "external",
            summary: "SUSE ratings",
            url: "https://www.suse.com/support/security/rating/",
         },
         {
            category: "self",
            summary: "URL of this CSAF notice",
            url: "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2024_10901-1.json",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-5195 page",
            url: "https://www.suse.com/security/cve/CVE-2016-5195/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2016-8859 page",
            url: "https://www.suse.com/security/cve/CVE-2016-8859/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2017-1002101 page",
            url: "https://www.suse.com/security/cve/CVE-2017-1002101/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2018-1002105 page",
            url: "https://www.suse.com/security/cve/CVE-2018-1002105/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-11247 page",
            url: "https://www.suse.com/security/cve/CVE-2019-11247/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-11249 page",
            url: "https://www.suse.com/security/cve/CVE-2019-11249/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-11253 page",
            url: "https://www.suse.com/security/cve/CVE-2019-11253/",
         },
         {
            category: "self",
            summary: "SUSE CVE CVE-2019-9512 page",
            url: "https://www.suse.com/security/cve/CVE-2019-9512/",
         },
      ],
      title: "kubernetes-apiserver-1.22.2-21.2 on GA media",
      tracking: {
         current_release_date: "2024-06-15T00:00:00Z",
         generator: {
            date: "2024-06-15T00:00:00Z",
            engine: {
               name: "cve-database.git:bin/generate-csaf.pl",
               version: "1",
            },
         },
         id: "openSUSE-SU-2024:10901-1",
         initial_release_date: "2024-06-15T00:00:00Z",
         revision_history: [
            {
               date: "2024-06-15T00:00:00Z",
               number: "1",
               summary: "Current version",
            },
         ],
         status: "final",
         version: "1",
      },
   },
   product_tree: {
      branches: [
         {
            branches: [
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "kubernetes-apiserver-1.22.2-21.2.aarch64",
                        product: {
                           name: "kubernetes-apiserver-1.22.2-21.2.aarch64",
                           product_id: "kubernetes-apiserver-1.22.2-21.2.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
                        product: {
                           name: "kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
                           product_id: "kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-client-1.22.2-21.2.aarch64",
                        product: {
                           name: "kubernetes-client-1.22.2-21.2.aarch64",
                           product_id: "kubernetes-client-1.22.2-21.2.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-controller-manager-1.22.2-21.2.aarch64",
                        product: {
                           name: "kubernetes-controller-manager-1.22.2-21.2.aarch64",
                           product_id: "kubernetes-controller-manager-1.22.2-21.2.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
                        product: {
                           name: "kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
                           product_id: "kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-coredns-1.8.4-21.2.aarch64",
                        product: {
                           name: "kubernetes-coredns-1.8.4-21.2.aarch64",
                           product_id: "kubernetes-coredns-1.8.4-21.2.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
                        product: {
                           name: "kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
                           product_id: "kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-etcd-3.5.0-21.2.aarch64",
                        product: {
                           name: "kubernetes-etcd-3.5.0-21.2.aarch64",
                           product_id: "kubernetes-etcd-3.5.0-21.2.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
                        product: {
                           name: "kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
                           product_id: "kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-kubeadm-1.22.2-21.2.aarch64",
                        product: {
                           name: "kubernetes-kubeadm-1.22.2-21.2.aarch64",
                           product_id: "kubernetes-kubeadm-1.22.2-21.2.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-kubelet-1.22.2-21.2.aarch64",
                        product: {
                           name: "kubernetes-kubelet-1.22.2-21.2.aarch64",
                           product_id: "kubernetes-kubelet-1.22.2-21.2.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-proxy-1.22.2-21.2.aarch64",
                        product: {
                           name: "kubernetes-proxy-1.22.2-21.2.aarch64",
                           product_id: "kubernetes-proxy-1.22.2-21.2.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
                        product: {
                           name: "kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
                           product_id: "kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-scheduler-1.22.2-21.2.aarch64",
                        product: {
                           name: "kubernetes-scheduler-1.22.2-21.2.aarch64",
                           product_id: "kubernetes-scheduler-1.22.2-21.2.aarch64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
                        product: {
                           name: "kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
                           product_id: "kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "aarch64",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "kubernetes-apiserver-1.22.2-21.2.ppc64le",
                        product: {
                           name: "kubernetes-apiserver-1.22.2-21.2.ppc64le",
                           product_id: "kubernetes-apiserver-1.22.2-21.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
                        product: {
                           name: "kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
                           product_id: "kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-client-1.22.2-21.2.ppc64le",
                        product: {
                           name: "kubernetes-client-1.22.2-21.2.ppc64le",
                           product_id: "kubernetes-client-1.22.2-21.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-controller-manager-1.22.2-21.2.ppc64le",
                        product: {
                           name: "kubernetes-controller-manager-1.22.2-21.2.ppc64le",
                           product_id: "kubernetes-controller-manager-1.22.2-21.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
                        product: {
                           name: "kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
                           product_id: "kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-coredns-1.8.4-21.2.ppc64le",
                        product: {
                           name: "kubernetes-coredns-1.8.4-21.2.ppc64le",
                           product_id: "kubernetes-coredns-1.8.4-21.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
                        product: {
                           name: "kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
                           product_id: "kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-etcd-3.5.0-21.2.ppc64le",
                        product: {
                           name: "kubernetes-etcd-3.5.0-21.2.ppc64le",
                           product_id: "kubernetes-etcd-3.5.0-21.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
                        product: {
                           name: "kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
                           product_id: "kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-kubeadm-1.22.2-21.2.ppc64le",
                        product: {
                           name: "kubernetes-kubeadm-1.22.2-21.2.ppc64le",
                           product_id: "kubernetes-kubeadm-1.22.2-21.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-kubelet-1.22.2-21.2.ppc64le",
                        product: {
                           name: "kubernetes-kubelet-1.22.2-21.2.ppc64le",
                           product_id: "kubernetes-kubelet-1.22.2-21.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-proxy-1.22.2-21.2.ppc64le",
                        product: {
                           name: "kubernetes-proxy-1.22.2-21.2.ppc64le",
                           product_id: "kubernetes-proxy-1.22.2-21.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
                        product: {
                           name: "kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
                           product_id: "kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-scheduler-1.22.2-21.2.ppc64le",
                        product: {
                           name: "kubernetes-scheduler-1.22.2-21.2.ppc64le",
                           product_id: "kubernetes-scheduler-1.22.2-21.2.ppc64le",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
                        product: {
                           name: "kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
                           product_id: "kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "ppc64le",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "kubernetes-apiserver-1.22.2-21.2.s390x",
                        product: {
                           name: "kubernetes-apiserver-1.22.2-21.2.s390x",
                           product_id: "kubernetes-apiserver-1.22.2-21.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
                        product: {
                           name: "kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
                           product_id: "kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-client-1.22.2-21.2.s390x",
                        product: {
                           name: "kubernetes-client-1.22.2-21.2.s390x",
                           product_id: "kubernetes-client-1.22.2-21.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-controller-manager-1.22.2-21.2.s390x",
                        product: {
                           name: "kubernetes-controller-manager-1.22.2-21.2.s390x",
                           product_id: "kubernetes-controller-manager-1.22.2-21.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
                        product: {
                           name: "kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
                           product_id: "kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-coredns-1.8.4-21.2.s390x",
                        product: {
                           name: "kubernetes-coredns-1.8.4-21.2.s390x",
                           product_id: "kubernetes-coredns-1.8.4-21.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-coredns-minus1-1.8.0-21.2.s390x",
                        product: {
                           name: "kubernetes-coredns-minus1-1.8.0-21.2.s390x",
                           product_id: "kubernetes-coredns-minus1-1.8.0-21.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-etcd-3.5.0-21.2.s390x",
                        product: {
                           name: "kubernetes-etcd-3.5.0-21.2.s390x",
                           product_id: "kubernetes-etcd-3.5.0-21.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-etcd-minus1-3.4.13-21.2.s390x",
                        product: {
                           name: "kubernetes-etcd-minus1-3.4.13-21.2.s390x",
                           product_id: "kubernetes-etcd-minus1-3.4.13-21.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-kubeadm-1.22.2-21.2.s390x",
                        product: {
                           name: "kubernetes-kubeadm-1.22.2-21.2.s390x",
                           product_id: "kubernetes-kubeadm-1.22.2-21.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-kubelet-1.22.2-21.2.s390x",
                        product: {
                           name: "kubernetes-kubelet-1.22.2-21.2.s390x",
                           product_id: "kubernetes-kubelet-1.22.2-21.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-proxy-1.22.2-21.2.s390x",
                        product: {
                           name: "kubernetes-proxy-1.22.2-21.2.s390x",
                           product_id: "kubernetes-proxy-1.22.2-21.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-proxy-minus1-1.21.5-21.2.s390x",
                        product: {
                           name: "kubernetes-proxy-minus1-1.21.5-21.2.s390x",
                           product_id: "kubernetes-proxy-minus1-1.21.5-21.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-scheduler-1.22.2-21.2.s390x",
                        product: {
                           name: "kubernetes-scheduler-1.22.2-21.2.s390x",
                           product_id: "kubernetes-scheduler-1.22.2-21.2.s390x",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
                        product: {
                           name: "kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
                           product_id: "kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "s390x",
               },
               {
                  branches: [
                     {
                        category: "product_version",
                        name: "kubernetes-apiserver-1.22.2-21.2.x86_64",
                        product: {
                           name: "kubernetes-apiserver-1.22.2-21.2.x86_64",
                           product_id: "kubernetes-apiserver-1.22.2-21.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
                        product: {
                           name: "kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
                           product_id: "kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-client-1.22.2-21.2.x86_64",
                        product: {
                           name: "kubernetes-client-1.22.2-21.2.x86_64",
                           product_id: "kubernetes-client-1.22.2-21.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-controller-manager-1.22.2-21.2.x86_64",
                        product: {
                           name: "kubernetes-controller-manager-1.22.2-21.2.x86_64",
                           product_id: "kubernetes-controller-manager-1.22.2-21.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
                        product: {
                           name: "kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
                           product_id: "kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-coredns-1.8.4-21.2.x86_64",
                        product: {
                           name: "kubernetes-coredns-1.8.4-21.2.x86_64",
                           product_id: "kubernetes-coredns-1.8.4-21.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
                        product: {
                           name: "kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
                           product_id: "kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-etcd-3.5.0-21.2.x86_64",
                        product: {
                           name: "kubernetes-etcd-3.5.0-21.2.x86_64",
                           product_id: "kubernetes-etcd-3.5.0-21.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
                        product: {
                           name: "kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
                           product_id: "kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-kubeadm-1.22.2-21.2.x86_64",
                        product: {
                           name: "kubernetes-kubeadm-1.22.2-21.2.x86_64",
                           product_id: "kubernetes-kubeadm-1.22.2-21.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-kubelet-1.22.2-21.2.x86_64",
                        product: {
                           name: "kubernetes-kubelet-1.22.2-21.2.x86_64",
                           product_id: "kubernetes-kubelet-1.22.2-21.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-proxy-1.22.2-21.2.x86_64",
                        product: {
                           name: "kubernetes-proxy-1.22.2-21.2.x86_64",
                           product_id: "kubernetes-proxy-1.22.2-21.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
                        product: {
                           name: "kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
                           product_id: "kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-scheduler-1.22.2-21.2.x86_64",
                        product: {
                           name: "kubernetes-scheduler-1.22.2-21.2.x86_64",
                           product_id: "kubernetes-scheduler-1.22.2-21.2.x86_64",
                        },
                     },
                     {
                        category: "product_version",
                        name: "kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
                        product: {
                           name: "kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
                           product_id: "kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
                        },
                     },
                  ],
                  category: "architecture",
                  name: "x86_64",
               },
               {
                  branches: [
                     {
                        category: "product_name",
                        name: "openSUSE Tumbleweed",
                        product: {
                           name: "openSUSE Tumbleweed",
                           product_id: "openSUSE Tumbleweed",
                           product_identification_helper: {
                              cpe: "cpe:/o:opensuse:tumbleweed",
                           },
                        },
                     },
                  ],
                  category: "product_family",
                  name: "SUSE Linux Enterprise",
               },
            ],
            category: "vendor",
            name: "SUSE",
         },
      ],
      relationships: [
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-apiserver-1.22.2-21.2.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
            },
            product_reference: "kubernetes-apiserver-1.22.2-21.2.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-apiserver-1.22.2-21.2.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
            },
            product_reference: "kubernetes-apiserver-1.22.2-21.2.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-apiserver-1.22.2-21.2.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
            },
            product_reference: "kubernetes-apiserver-1.22.2-21.2.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-apiserver-1.22.2-21.2.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
            },
            product_reference: "kubernetes-apiserver-1.22.2-21.2.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-apiserver-minus1-1.21.5-21.2.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
            },
            product_reference: "kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
            },
            product_reference: "kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-apiserver-minus1-1.21.5-21.2.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
            },
            product_reference: "kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-apiserver-minus1-1.21.5-21.2.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
            },
            product_reference: "kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-client-1.22.2-21.2.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
            },
            product_reference: "kubernetes-client-1.22.2-21.2.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-client-1.22.2-21.2.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
            },
            product_reference: "kubernetes-client-1.22.2-21.2.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-client-1.22.2-21.2.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
            },
            product_reference: "kubernetes-client-1.22.2-21.2.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-client-1.22.2-21.2.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
            },
            product_reference: "kubernetes-client-1.22.2-21.2.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-controller-manager-1.22.2-21.2.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
            },
            product_reference: "kubernetes-controller-manager-1.22.2-21.2.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-controller-manager-1.22.2-21.2.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
            },
            product_reference: "kubernetes-controller-manager-1.22.2-21.2.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-controller-manager-1.22.2-21.2.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
            },
            product_reference: "kubernetes-controller-manager-1.22.2-21.2.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-controller-manager-1.22.2-21.2.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
            },
            product_reference: "kubernetes-controller-manager-1.22.2-21.2.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
            },
            product_reference: "kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
            },
            product_reference: "kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-controller-manager-minus1-1.21.5-21.2.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
            },
            product_reference: "kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
            },
            product_reference: "kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-coredns-1.8.4-21.2.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
            },
            product_reference: "kubernetes-coredns-1.8.4-21.2.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-coredns-1.8.4-21.2.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
            },
            product_reference: "kubernetes-coredns-1.8.4-21.2.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-coredns-1.8.4-21.2.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
            },
            product_reference: "kubernetes-coredns-1.8.4-21.2.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-coredns-1.8.4-21.2.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
            },
            product_reference: "kubernetes-coredns-1.8.4-21.2.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-coredns-minus1-1.8.0-21.2.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
            },
            product_reference: "kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-coredns-minus1-1.8.0-21.2.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
            },
            product_reference: "kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-coredns-minus1-1.8.0-21.2.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
            },
            product_reference: "kubernetes-coredns-minus1-1.8.0-21.2.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-coredns-minus1-1.8.0-21.2.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
            },
            product_reference: "kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-etcd-3.5.0-21.2.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
            },
            product_reference: "kubernetes-etcd-3.5.0-21.2.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-etcd-3.5.0-21.2.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
            },
            product_reference: "kubernetes-etcd-3.5.0-21.2.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-etcd-3.5.0-21.2.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
            },
            product_reference: "kubernetes-etcd-3.5.0-21.2.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-etcd-3.5.0-21.2.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
            },
            product_reference: "kubernetes-etcd-3.5.0-21.2.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-etcd-minus1-3.4.13-21.2.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
            },
            product_reference: "kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-etcd-minus1-3.4.13-21.2.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
            },
            product_reference: "kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-etcd-minus1-3.4.13-21.2.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
            },
            product_reference: "kubernetes-etcd-minus1-3.4.13-21.2.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-etcd-minus1-3.4.13-21.2.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
            },
            product_reference: "kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-kubeadm-1.22.2-21.2.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
            },
            product_reference: "kubernetes-kubeadm-1.22.2-21.2.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-kubeadm-1.22.2-21.2.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
            },
            product_reference: "kubernetes-kubeadm-1.22.2-21.2.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-kubeadm-1.22.2-21.2.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
            },
            product_reference: "kubernetes-kubeadm-1.22.2-21.2.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-kubeadm-1.22.2-21.2.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
            },
            product_reference: "kubernetes-kubeadm-1.22.2-21.2.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-kubelet-1.22.2-21.2.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
            },
            product_reference: "kubernetes-kubelet-1.22.2-21.2.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-kubelet-1.22.2-21.2.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
            },
            product_reference: "kubernetes-kubelet-1.22.2-21.2.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-kubelet-1.22.2-21.2.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
            },
            product_reference: "kubernetes-kubelet-1.22.2-21.2.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-kubelet-1.22.2-21.2.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
            },
            product_reference: "kubernetes-kubelet-1.22.2-21.2.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-proxy-1.22.2-21.2.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
            },
            product_reference: "kubernetes-proxy-1.22.2-21.2.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-proxy-1.22.2-21.2.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
            },
            product_reference: "kubernetes-proxy-1.22.2-21.2.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-proxy-1.22.2-21.2.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
            },
            product_reference: "kubernetes-proxy-1.22.2-21.2.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-proxy-1.22.2-21.2.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
            },
            product_reference: "kubernetes-proxy-1.22.2-21.2.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-proxy-minus1-1.21.5-21.2.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
            },
            product_reference: "kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-proxy-minus1-1.21.5-21.2.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
            },
            product_reference: "kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-proxy-minus1-1.21.5-21.2.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
            },
            product_reference: "kubernetes-proxy-minus1-1.21.5-21.2.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-proxy-minus1-1.21.5-21.2.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
            },
            product_reference: "kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-scheduler-1.22.2-21.2.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
            },
            product_reference: "kubernetes-scheduler-1.22.2-21.2.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-scheduler-1.22.2-21.2.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
            },
            product_reference: "kubernetes-scheduler-1.22.2-21.2.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-scheduler-1.22.2-21.2.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
            },
            product_reference: "kubernetes-scheduler-1.22.2-21.2.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-scheduler-1.22.2-21.2.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
            },
            product_reference: "kubernetes-scheduler-1.22.2-21.2.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-scheduler-minus1-1.21.5-21.2.aarch64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
            },
            product_reference: "kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
            },
            product_reference: "kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-scheduler-minus1-1.21.5-21.2.s390x as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
            },
            product_reference: "kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
         {
            category: "default_component_of",
            full_product_name: {
               name: "kubernetes-scheduler-minus1-1.21.5-21.2.x86_64 as component of openSUSE Tumbleweed",
               product_id: "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
            },
            product_reference: "kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
            relates_to_product_reference: "openSUSE Tumbleweed",
         },
      ],
   },
   vulnerabilities: [
      {
         cve: "CVE-2016-5195",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-5195",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka \"Dirty COW.\"",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-5195",
               url: "https://www.suse.com/security/cve/CVE-2016-5195",
            },
            {
               category: "external",
               summary: "SUSE Bug 1004418 for CVE-2016-5195",
               url: "https://bugzilla.suse.com/1004418",
            },
            {
               category: "external",
               summary: "SUSE Bug 1004419 for CVE-2016-5195",
               url: "https://bugzilla.suse.com/1004419",
            },
            {
               category: "external",
               summary: "SUSE Bug 1004436 for CVE-2016-5195",
               url: "https://bugzilla.suse.com/1004436",
            },
            {
               category: "external",
               summary: "SUSE Bug 1006323 for CVE-2016-5195",
               url: "https://bugzilla.suse.com/1006323",
            },
            {
               category: "external",
               summary: "SUSE Bug 1006695 for CVE-2016-5195",
               url: "https://bugzilla.suse.com/1006695",
            },
            {
               category: "external",
               summary: "SUSE Bug 1007291 for CVE-2016-5195",
               url: "https://bugzilla.suse.com/1007291",
            },
            {
               category: "external",
               summary: "SUSE Bug 1008110 for CVE-2016-5195",
               url: "https://bugzilla.suse.com/1008110",
            },
            {
               category: "external",
               summary: "SUSE Bug 1030118 for CVE-2016-5195",
               url: "https://bugzilla.suse.com/1030118",
            },
            {
               category: "external",
               summary: "SUSE Bug 1046453 for CVE-2016-5195",
               url: "https://bugzilla.suse.com/1046453",
            },
            {
               category: "external",
               summary: "SUSE Bug 1069496 for CVE-2016-5195",
               url: "https://bugzilla.suse.com/1069496",
            },
            {
               category: "external",
               summary: "SUSE Bug 1149725 for CVE-2016-5195",
               url: "https://bugzilla.suse.com/1149725",
            },
            {
               category: "external",
               summary: "SUSE Bug 870618 for CVE-2016-5195",
               url: "https://bugzilla.suse.com/870618",
            },
            {
               category: "external",
               summary: "SUSE Bug 986445 for CVE-2016-5195",
               url: "https://bugzilla.suse.com/986445",
            },
            {
               category: "external",
               summary: "SUSE Bug 998689 for CVE-2016-5195",
               url: "https://bugzilla.suse.com/998689",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.8,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.1",
               },
               products: [
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "important",
            },
         ],
         title: "CVE-2016-5195",
      },
      {
         cve: "CVE-2016-8859",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2016-8859",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of (1) states or (2) tags, which triggers an out-of-bounds write.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2016-8859",
               url: "https://www.suse.com/security/cve/CVE-2016-8859",
            },
            {
               category: "external",
               summary: "SUSE Bug 1005483 for CVE-2016-8859",
               url: "https://bugzilla.suse.com/1005483",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2016-8859",
      },
      {
         cve: "CVE-2017-1002101",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2017-1002101",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host's filesystem.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2017-1002101",
               url: "https://www.suse.com/security/cve/CVE-2017-1002101",
            },
            {
               category: "external",
               summary: "SUSE Bug 1084923 for CVE-2017-1002101",
               url: "https://bugzilla.suse.com/1084923",
            },
            {
               category: "external",
               summary: "SUSE Bug 1085007 for CVE-2017-1002101",
               url: "https://bugzilla.suse.com/1085007",
            },
            {
               category: "external",
               summary: "SUSE Bug 1085009 for CVE-2017-1002101",
               url: "https://bugzilla.suse.com/1085009",
            },
            {
               category: "external",
               summary: "SUSE Bug 1096726 for CVE-2017-1002101",
               url: "https://bugzilla.suse.com/1096726",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.4,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "important",
            },
         ],
         title: "CVE-2017-1002101",
      },
      {
         cve: "CVE-2018-1002105",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2018-1002105",
            },
         ],
         notes: [
            {
               category: "general",
               text: "In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server's TLS credentials used to establish the backend connection.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2018-1002105",
               url: "https://www.suse.com/security/cve/CVE-2018-1002105",
            },
            {
               category: "external",
               summary: "SUSE Bug 1118198 for CVE-2018-1002105",
               url: "https://bugzilla.suse.com/1118198",
            },
            {
               category: "external",
               summary: "SUSE Bug 1118260 for CVE-2018-1002105",
               url: "https://bugzilla.suse.com/1118260",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
               products: [
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "critical",
            },
         ],
         title: "CVE-2018-1002105",
      },
      {
         cve: "CVE-2019-11247",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-11247",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced. Authorizations for the resource accessed in this manner are enforced using roles and role bindings within the namespace, meaning that a user with access only to a resource in one namespace could create, view update or delete the cluster-scoped resource (according to their namespace role privileges). Kubernetes affected versions include versions prior to 1.13.9, versions prior to 1.14.5, versions prior to 1.15.2, and versions 1.7, 1.8, 1.9, 1.10, 1.11, 1.12.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-11247",
               url: "https://www.suse.com/security/cve/CVE-2019-11247",
            },
            {
               category: "external",
               summary: "SUSE Bug 1142423 for CVE-2019-11247",
               url: "https://bugzilla.suse.com/1142423",
            },
            {
               category: "external",
               summary: "SUSE Bug 1142434 for CVE-2019-11247",
               url: "https://bugzilla.suse.com/1142434",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.0",
               },
               products: [
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2019-11247",
      },
      {
         cve: "CVE-2019-11249",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-11249",
            },
         ],
         notes: [
            {
               category: "general",
               text: "The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user's machine. If the tar binary in the container is malicious, it could run any code and output unexpected, malicious results. An attacker could use this to write files to any path on the user's machine when kubectl cp is called, limited only by the system permissions of the local user. Kubernetes affected versions include versions prior to 1.13.9, versions prior to 1.14.5, versions prior to 1.15.2, and versions 1.1, 1.2, 1.4, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 1.10, 1.11, 1.12.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-11249",
               url: "https://www.suse.com/security/cve/CVE-2019-11249",
            },
            {
               category: "external",
               summary: "SUSE Bug 1144507 for CVE-2019-11249",
               url: "https://bugzilla.suse.com/1144507",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 4.8,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N",
                  version: "3.0",
               },
               products: [
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2019-11249",
      },
      {
         cve: "CVE-2019-11253",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-11253",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memory, potentially crashing and becoming unavailable. Prior to v1.14.0, default RBAC policy authorized anonymous users to submit requests that could trigger this vulnerability. Clusters upgraded from a version prior to v1.14.0 keep the more permissive policy by default for backwards compatibility.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-11253",
               url: "https://www.suse.com/security/cve/CVE-2019-11253",
            },
            {
               category: "external",
               summary: "SUSE Bug 1152861 for CVE-2019-11253",
               url: "https://bugzilla.suse.com/1152861",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 6.5,
                  baseSeverity: "MEDIUM",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
               products: [
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "moderate",
            },
         ],
         title: "CVE-2019-11253",
      },
      {
         cve: "CVE-2019-9512",
         ids: [
            {
               system_name: "SUSE CVE Page",
               text: "https://www.suse.com/security/cve/CVE-2019-9512",
            },
         ],
         notes: [
            {
               category: "general",
               text: "Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.",
               title: "CVE description",
            },
         ],
         product_status: {
            recommended: [
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
               "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
            ],
         },
         references: [
            {
               category: "external",
               summary: "CVE-2019-9512",
               url: "https://www.suse.com/security/cve/CVE-2019-9512",
            },
            {
               category: "external",
               summary: "SUSE Bug 1145663 for CVE-2019-9512",
               url: "https://bugzilla.suse.com/1145663",
            },
            {
               category: "external",
               summary: "SUSE Bug 1146099 for CVE-2019-9512",
               url: "https://bugzilla.suse.com/1146099",
            },
            {
               category: "external",
               summary: "SUSE Bug 1146111 for CVE-2019-9512",
               url: "https://bugzilla.suse.com/1146111",
            },
            {
               category: "external",
               summary: "SUSE Bug 1147142 for CVE-2019-9512",
               url: "https://bugzilla.suse.com/1147142",
            },
         ],
         remediations: [
            {
               category: "vendor_fix",
               details: "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
               product_ids: [
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
               ],
            },
         ],
         scores: [
            {
               cvss_v3: {
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
               products: [
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2.x86_64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.aarch64",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.ppc64le",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.s390x",
                  "openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2.x86_64",
               ],
            },
         ],
         threats: [
            {
               category: "impact",
               date: "2024-06-15T00:00:00Z",
               details: "important",
            },
         ],
         title: "CVE-2019-9512",
      },
   ],
}

cve-2019-11253

Vulnerability from cvelistv5

Published

2019-10-17 15:40

Modified

2024-09-16 23:21

Severity ?

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memory, potentially crashing and becoming unavailable. Prior to v1.14.0, default RBAC policy authorized anonymous users to submit requests that could trigger this vulnerability. Clusters upgraded from a version prior to v1.14.0 keep the more permissive policy by default for backwards compatibility.

References

▼	URL	Tags
	https://github.com/kubernetes/kubernetes/issues/83253	x_refsource_CONFIRM
	https://groups.google.com/forum/#%21topic/kubernetes-security-announce/jk8polzSUxs	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2019:3239	vendor-advisory, x_refsource_REDHAT
	https://security.netapp.com/advisory/ntap-20191031-0006/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2019:3811	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:3905	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Kubernetes	Kubernetes	Version: prior to 1.13.12 Version: prior to 1.14.8 Version: prior to 1.15.5 Version: prior to 1.16.2 Version: 1.1 Version: 1.2 Version: 1.3 Version: 1.4 Version: 1.5 Version: 1.6 Version: 1.7 Version: 1.8 Version: 1.9 Version: 1.10 Version: 1.11 Version: 1.12

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T22:48:09.095Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/kubernetes/kubernetes/issues/83253",
               },
               {
                  name: "CVE-2019-11253: denial of service vulnerability from malicious YAML or JSON payloads",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://groups.google.com/forum/#%21topic/kubernetes-security-announce/jk8polzSUxs",
               },
               {
                  name: "RHSA-2019:3239",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:3239",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20191031-0006/",
               },
               {
                  name: "RHSA-2019:3811",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:3811",
               },
               {
                  name: "RHSA-2019:3905",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:3905",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Kubernetes",
               vendor: "Kubernetes",
               versions: [
                  {
                     status: "affected",
                     version: "prior to 1.13.12",
                  },
                  {
                     status: "affected",
                     version: "prior to 1.14.8",
                  },
                  {
                     status: "affected",
                     version: "prior to 1.15.5",
                  },
                  {
                     status: "affected",
                     version: "prior to 1.16.2",
                  },
                  {
                     status: "affected",
                     version: "1.1",
                  },
                  {
                     status: "affected",
                     version: "1.2",
                  },
                  {
                     status: "affected",
                     version: "1.3",
                  },
                  {
                     status: "affected",
                     version: "1.4",
                  },
                  {
                     status: "affected",
                     version: "1.5",
                  },
                  {
                     status: "affected",
                     version: "1.6",
                  },
                  {
                     status: "affected",
                     version: "1.7",
                  },
                  {
                     status: "affected",
                     version: "1.8",
                  },
                  {
                     status: "affected",
                     version: "1.9",
                  },
                  {
                     status: "affected",
                     version: "1.10",
                  },
                  {
                     status: "affected",
                     version: "1.11",
                  },
                  {
                     status: "affected",
                     version: "1.12",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "Rory McCune",
            },
         ],
         datePublic: "2019-09-27T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memory, potentially crashing and becoming unavailable. Prior to v1.14.0, default RBAC policy authorized anonymous users to submit requests that could trigger this vulnerability. Clusters upgraded from a version prior to v1.14.0 keep the more permissive policy by default for backwards compatibility.",
            },
         ],
         metrics: [
            {
               cvssV3_1: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-20",
                     description: "CWE-20: Improper Input Validation",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2019-11-18T20:06:59",
            orgId: "a6081bf6-c852-4425-ad4f-a67919267565",
            shortName: "kubernetes",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/kubernetes/kubernetes/issues/83253",
            },
            {
               name: "CVE-2019-11253: denial of service vulnerability from malicious YAML or JSON payloads",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://groups.google.com/forum/#%21topic/kubernetes-security-announce/jk8polzSUxs",
            },
            {
               name: "RHSA-2019:3239",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:3239",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20191031-0006/",
            },
            {
               name: "RHSA-2019:3811",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:3811",
            },
            {
               name: "RHSA-2019:3905",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:3905",
            },
         ],
         source: {
            defect: [
               "https://github.com/kubernetes/kubernetes/issues/83253",
            ],
            discovery: "USER",
         },
         title: "Kubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack",
         workarounds: [
            {
               lang: "en",
               value: "Exposure to requests from unauthenticated users can be mitigated by removing all write permissions from unauthenticated users, following instructions at https://github.com/kubernetes/kubernetes/issues/83253",
            },
         ],
         x_generator: {
            engine: "Vulnogram 0.0.7",
         },
         x_legacyV4Record: {
            CVE_data_meta: {
               AKA: "",
               ASSIGNER: "security@kubernetes.io",
               DATE_PUBLIC: "2019-09-27",
               ID: "CVE-2019-11253",
               STATE: "PUBLIC",
               TITLE: "Kubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Kubernetes",
                                 version: {
                                    version_data: [
                                       {
                                          platform: "",
                                          version_affected: "",
                                          version_name: "",
                                          version_value: "prior to 1.13.12",
                                       },
                                       {
                                          platform: "",
                                          version_affected: "",
                                          version_name: "",
                                          version_value: "prior to 1.14.8",
                                       },
                                       {
                                          platform: "",
                                          version_affected: "",
                                          version_name: "",
                                          version_value: "prior to 1.15.5",
                                       },
                                       {
                                          platform: "",
                                          version_affected: "",
                                          version_name: "",
                                          version_value: "prior to 1.16.2",
                                       },
                                       {
                                          platform: "",
                                          version_affected: "",
                                          version_name: "",
                                          version_value: "1.1",
                                       },
                                       {
                                          platform: "",
                                          version_affected: "",
                                          version_name: "",
                                          version_value: "1.2",
                                       },
                                       {
                                          platform: "",
                                          version_affected: "",
                                          version_name: "",
                                          version_value: "1.3",
                                       },
                                       {
                                          platform: "",
                                          version_affected: "",
                                          version_name: "",
                                          version_value: "1.4",
                                       },
                                       {
                                          platform: "",
                                          version_affected: "",
                                          version_name: "",
                                          version_value: "1.5",
                                       },
                                       {
                                          platform: "",
                                          version_affected: "",
                                          version_name: "",
                                          version_value: "1.6",
                                       },
                                       {
                                          platform: "",
                                          version_affected: "",
                                          version_name: "",
                                          version_value: "1.7",
                                       },
                                       {
                                          platform: "",
                                          version_affected: "",
                                          version_name: "",
                                          version_value: "1.8",
                                       },
                                       {
                                          platform: "",
                                          version_affected: "",
                                          version_name: "",
                                          version_value: "1.9",
                                       },
                                       {
                                          platform: "",
                                          version_affected: "",
                                          version_name: "",
                                          version_value: "1.10",
                                       },
                                       {
                                          platform: "",
                                          version_affected: "",
                                          version_name: "",
                                          version_value: "1.11",
                                       },
                                       {
                                          platform: "",
                                          version_affected: "",
                                          version_name: "",
                                          version_value: "1.12",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Kubernetes",
                     },
                  ],
               },
            },
            configuration: [],
            credit: [
               {
                  lang: "eng",
                  value: "Rory McCune",
               },
            ],
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memory, potentially crashing and becoming unavailable. Prior to v1.14.0, default RBAC policy authorized anonymous users to submit requests that could trigger this vulnerability. Clusters upgraded from a version prior to v1.14.0 keep the more permissive policy by default for backwards compatibility.",
                  },
               ],
            },
            exploit: [],
            generator: {
               engine: "Vulnogram 0.0.7",
            },
            impact: {
               cvss: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.1",
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-20: Improper Input Validation",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/kubernetes/kubernetes/issues/83253",
                     refsource: "CONFIRM",
                     url: "https://github.com/kubernetes/kubernetes/issues/83253",
                  },
                  {
                     name: "CVE-2019-11253: denial of service vulnerability from malicious YAML or JSON payloads",
                     refsource: "MLIST",
                     url: "https://groups.google.com/forum/#!topic/kubernetes-security-announce/jk8polzSUxs",
                  },
                  {
                     name: "RHSA-2019:3239",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:3239",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20191031-0006/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20191031-0006/",
                  },
                  {
                     name: "RHSA-2019:3811",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:3811",
                  },
                  {
                     name: "RHSA-2019:3905",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:3905",
                  },
               ],
            },
            solution: [],
            source: {
               advisory: "",
               defect: [
                  "https://github.com/kubernetes/kubernetes/issues/83253",
               ],
               discovery: "USER",
            },
            work_around: [
               {
                  lang: "en",
                  value: "Exposure to requests from unauthenticated users can be mitigated by removing all write permissions from unauthenticated users, following instructions at https://github.com/kubernetes/kubernetes/issues/83253",
               },
            ],
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "a6081bf6-c852-4425-ad4f-a67919267565",
      assignerShortName: "kubernetes",
      cveId: "CVE-2019-11253",
      datePublished: "2019-10-17T15:40:10.154574Z",
      dateReserved: "2019-04-17T00:00:00",
      dateUpdated: "2024-09-16T23:21:47.959Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2019-11249

Vulnerability from cvelistv5

Published

2019-08-29 00:26

Modified

2024-09-16 18:19

Severity ?

4.8 (Medium) - CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N

Summary

The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in the container is malicious, it could run any code and output unexpected, malicious results. An attacker could use this to write files to any path on the user’s machine when kubectl cp is called, limited only by the system permissions of the local user. Kubernetes affected versions include versions prior to 1.13.9, versions prior to 1.14.5, versions prior to 1.15.2, and versions 1.1, 1.2, 1.4, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 1.10, 1.11, 1.12.

References

▼	URL	Tags
	https://groups.google.com/d/msg/kubernetes-security-announce/vUtEcSEY6SM/v2ZZxsmtFQAJ	mailing-list, x_refsource_MLIST
	https://github.com/kubernetes/kubernetes/issues/80984	x_refsource_CONFIRM
	https://security.netapp.com/advisory/ntap-20190919-0003/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHBA-2019:2816	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHBA-2019:2794	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHBA-2019:2824	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:3239	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:3811	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Kubernetes	Kubernetes	Version: prior to 1.13.9 Version: prior to 1.14.5 Version: prior to 1.15.2 Version: 1.1 Version: 1.2 Version: 1.4 Version: 1.5 Version: 1.6 Version: 1.7 Version: 1.8 Version: 1.9 Version: 1.10 Version: 1.11 Version: 1.12

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T22:48:08.982Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "v1.13.9, v1.14.5, v1.15.2 released to address CVE-2019-11247, CVE-2019-11249",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://groups.google.com/d/msg/kubernetes-security-announce/vUtEcSEY6SM/v2ZZxsmtFQAJ",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/kubernetes/kubernetes/issues/80984",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20190919-0003/",
               },
               {
                  name: "RHBA-2019:2816",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHBA-2019:2816",
               },
               {
                  name: "RHBA-2019:2794",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHBA-2019:2794",
               },
               {
                  name: "RHBA-2019:2824",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHBA-2019:2824",
               },
               {
                  name: "RHSA-2019:3239",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:3239",
               },
               {
                  name: "RHSA-2019:3811",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:3811",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Kubernetes",
               vendor: "Kubernetes",
               versions: [
                  {
                     status: "affected",
                     version: "prior to 1.13.9",
                  },
                  {
                     status: "affected",
                     version: "prior to 1.14.5",
                  },
                  {
                     status: "affected",
                     version: "prior to 1.15.2",
                  },
                  {
                     status: "affected",
                     version: "1.1",
                  },
                  {
                     status: "affected",
                     version: "1.2",
                  },
                  {
                     status: "affected",
                     version: "1.4",
                  },
                  {
                     status: "affected",
                     version: "1.5",
                  },
                  {
                     status: "affected",
                     version: "1.6",
                  },
                  {
                     status: "affected",
                     version: "1.7",
                  },
                  {
                     status: "affected",
                     version: "1.8",
                  },
                  {
                     status: "affected",
                     version: "1.9",
                  },
                  {
                     status: "affected",
                     version: "1.10",
                  },
                  {
                     status: "affected",
                     version: "1.11",
                  },
                  {
                     status: "affected",
                     version: "1.12",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "Yang Yang, Amazon",
            },
         ],
         datePublic: "2019-08-05T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in the container is malicious, it could run any code and output unexpected, malicious results. An attacker could use this to write files to any path on the user’s machine when kubectl cp is called, limited only by the system permissions of the local user. Kubernetes affected versions include versions prior to 1.13.9, versions prior to 1.14.5, versions prior to 1.15.2, and versions 1.1, 1.2, 1.4, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 1.10, 1.11, 1.12.",
            },
         ],
         metrics: [
            {
               cvssV3_0: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 4.8,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "HIGH",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N",
                  version: "3.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-61",
                     description: "CWE-61: UNIX Symbolic Link (Symlink) Following",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2019-11-07T18:06:34",
            orgId: "a6081bf6-c852-4425-ad4f-a67919267565",
            shortName: "kubernetes",
         },
         references: [
            {
               name: "v1.13.9, v1.14.5, v1.15.2 released to address CVE-2019-11247, CVE-2019-11249",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://groups.google.com/d/msg/kubernetes-security-announce/vUtEcSEY6SM/v2ZZxsmtFQAJ",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/kubernetes/kubernetes/issues/80984",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20190919-0003/",
            },
            {
               name: "RHBA-2019:2816",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHBA-2019:2816",
            },
            {
               name: "RHBA-2019:2794",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHBA-2019:2794",
            },
            {
               name: "RHBA-2019:2824",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHBA-2019:2824",
            },
            {
               name: "RHSA-2019:3239",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:3239",
            },
            {
               name: "RHSA-2019:3811",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:3811",
            },
         ],
         source: {
            defect: [
               "https://github.com/kubernetes/kubernetes/issues/80984",
            ],
            discovery: "USER",
         },
         title: "kubectl cp allows symlink directory traversal",
         x_generator: {
            engine: "Vulnogram 0.0.7",
         },
         x_legacyV4Record: {
            CVE_data_meta: {
               AKA: "",
               ASSIGNER: "security@kubernetes.io",
               DATE_PUBLIC: "2019-08-05",
               ID: "CVE-2019-11249",
               STATE: "PUBLIC",
               TITLE: "kubectl cp allows symlink directory traversal",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Kubernetes",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "prior to 1.13.9",
                                       },
                                       {
                                          version_value: "prior to 1.14.5",
                                       },
                                       {
                                          version_value: "prior to 1.15.2",
                                       },
                                       {
                                          version_value: "1.1",
                                       },
                                       {
                                          version_value: "1.2",
                                       },
                                       {
                                          version_value: "1.4",
                                       },
                                       {
                                          version_value: "1.4",
                                       },
                                       {
                                          version_value: "1.5",
                                       },
                                       {
                                          version_value: "1.6",
                                       },
                                       {
                                          version_value: "1.7",
                                       },
                                       {
                                          version_value: "1.8",
                                       },
                                       {
                                          version_value: "1.9",
                                       },
                                       {
                                          version_value: "1.10",
                                       },
                                       {
                                          version_value: "1.11",
                                       },
                                       {
                                          version_value: "1.12",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Kubernetes",
                     },
                  ],
               },
            },
            configuration: [],
            credit: [
               {
                  lang: "eng",
                  value: "Yang Yang, Amazon",
               },
            ],
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user’s machine. If the tar binary in the container is malicious, it could run any code and output unexpected, malicious results. An attacker could use this to write files to any path on the user’s machine when kubectl cp is called, limited only by the system permissions of the local user. Kubernetes affected versions include versions prior to 1.13.9, versions prior to 1.14.5, versions prior to 1.15.2, and versions 1.1, 1.2, 1.4, 1.4, 1.5, 1.6, 1.7, 1.8, 1.9, 1.10, 1.11, 1.12.",
                  },
               ],
            },
            exploit: [],
            generator: {
               engine: "Vulnogram 0.0.7",
            },
            impact: {
               cvss: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "NONE",
                  baseScore: 4.8,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "NONE",
                  integrityImpact: "HIGH",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "REQUIRED",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N",
                  version: "3.0",
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-61: UNIX Symbolic Link (Symlink) Following",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "v1.13.9, v1.14.5, v1.15.2 released to address CVE-2019-11247, CVE-2019-11249",
                     refsource: "MLIST",
                     url: "https://groups.google.com/d/msg/kubernetes-security-announce/vUtEcSEY6SM/v2ZZxsmtFQAJ",
                  },
                  {
                     name: "https://github.com/kubernetes/kubernetes/issues/80984",
                     refsource: "CONFIRM",
                     url: "https://github.com/kubernetes/kubernetes/issues/80984",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20190919-0003/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20190919-0003/",
                  },
                  {
                     name: "RHBA-2019:2816",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHBA-2019:2816",
                  },
                  {
                     name: "RHBA-2019:2794",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHBA-2019:2794",
                  },
                  {
                     name: "RHBA-2019:2824",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHBA-2019:2824",
                  },
                  {
                     name: "RHSA-2019:3239",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:3239",
                  },
                  {
                     name: "RHSA-2019:3811",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:3811",
                  },
               ],
            },
            solution: [],
            source: {
               advisory: "",
               defect: [
                  "https://github.com/kubernetes/kubernetes/issues/80984",
               ],
               discovery: "USER",
            },
            work_around: [],
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "a6081bf6-c852-4425-ad4f-a67919267565",
      assignerShortName: "kubernetes",
      cveId: "CVE-2019-11249",
      datePublished: "2019-08-29T00:26:18.429187Z",
      dateReserved: "2019-04-17T00:00:00",
      dateUpdated: "2024-09-16T18:19:22.322Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2018-1002105

Vulnerability from cvelistv5

Published

2018-12-05 21:00

Modified

2024-08-05 12:47

Severity ?

9.8 (Critical) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server's TLS credentials used to establish the backend connection.

References

▼	URL	Tags
	https://groups.google.com/forum/#%21topic/kubernetes-announce/GVllWCg6L88	x_refsource_CONFIRM
	https://www.exploit-db.com/exploits/46053/	exploit, x_refsource_EXPLOIT-DB
	https://access.redhat.com/errata/RHSA-2018:3549	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:3752	vendor-advisory, x_refsource_REDHAT
	https://www.exploit-db.com/exploits/46052/	exploit, x_refsource_EXPLOIT-DB
	https://access.redhat.com/errata/RHSA-2018:3624	vendor-advisory, x_refsource_REDHAT
	https://www.coalfire.com/The-Coalfire-Blog/December-2018/Kubernetes-Vulnerability-What-You-Can-Should-Do	x_refsource_MISC
	https://github.com/kubernetes/kubernetes/issues/71411	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2018:3742	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:3754	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:3537	vendor-advisory, x_refsource_REDHAT
	https://github.com/evict/poc_CVE-2018-1002105	x_refsource_MISC
	https://access.redhat.com/errata/RHSA-2018:3598	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2018:3551	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/bid/106068	vdb-entry, x_refsource_BID
	https://security.netapp.com/advisory/ntap-20190416-0001/	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2019/06/28/2	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2019/07/06/3	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2019/07/06/4	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	Kubernetes	Kubernetes	Version: v1.0.x Version: v1.1.x Version: v1.2.x Version: v1.3.x Version: v1.4.x Version: v1.5.x Version: v1.6.x Version: v1.7.x Version: v1.8.x Version: v1.9.x Version: unspecified < v1.10.11 Version: unspecified < v1.11.5 Version: unspecified < v1.12.3

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T12:47:57.159Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://groups.google.com/forum/#%21topic/kubernetes-announce/GVllWCg6L88",
               },
               {
                  name: "46053",
                  tags: [
                     "exploit",
                     "x_refsource_EXPLOIT-DB",
                     "x_transferred",
                  ],
                  url: "https://www.exploit-db.com/exploits/46053/",
               },
               {
                  name: "RHSA-2018:3549",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2018:3549",
               },
               {
                  name: "RHSA-2018:3752",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2018:3752",
               },
               {
                  name: "46052",
                  tags: [
                     "exploit",
                     "x_refsource_EXPLOIT-DB",
                     "x_transferred",
                  ],
                  url: "https://www.exploit-db.com/exploits/46052/",
               },
               {
                  name: "RHSA-2018:3624",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2018:3624",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.coalfire.com/The-Coalfire-Blog/December-2018/Kubernetes-Vulnerability-What-You-Can-Should-Do",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/kubernetes/kubernetes/issues/71411",
               },
               {
                  name: "RHSA-2018:3742",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2018:3742",
               },
               {
                  name: "RHSA-2018:3754",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2018:3754",
               },
               {
                  name: "RHSA-2018:3537",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2018:3537",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/evict/poc_CVE-2018-1002105",
               },
               {
                  name: "RHSA-2018:3598",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2018:3598",
               },
               {
                  name: "RHSA-2018:3551",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2018:3551",
               },
               {
                  name: "106068",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/106068",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20190416-0001/",
               },
               {
                  name: "[oss-security] 20190628 Re: linux-distros membership application - Microsoft",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2019/06/28/2",
               },
               {
                  name: "[oss-security] 20190706 Re: linux-distros membership application - Microsoft",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2019/07/06/3",
               },
               {
                  name: "[oss-security] 20190706 Re: linux-distros membership application - Microsoft",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2019/07/06/4",
               },
               {
                  name: "openSUSE-SU-2020:0554",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Kubernetes",
               vendor: "Kubernetes",
               versions: [
                  {
                     status: "affected",
                     version: "v1.0.x",
                  },
                  {
                     status: "affected",
                     version: "v1.1.x",
                  },
                  {
                     status: "affected",
                     version: "v1.2.x",
                  },
                  {
                     status: "affected",
                     version: "v1.3.x",
                  },
                  {
                     status: "affected",
                     version: "v1.4.x",
                  },
                  {
                     status: "affected",
                     version: "v1.5.x",
                  },
                  {
                     status: "affected",
                     version: "v1.6.x",
                  },
                  {
                     status: "affected",
                     version: "v1.7.x",
                  },
                  {
                     status: "affected",
                     version: "v1.8.x",
                  },
                  {
                     status: "affected",
                     version: "v1.9.x",
                  },
                  {
                     lessThan: "v1.10.11",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
                  {
                     lessThan: "v1.11.5",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
                  {
                     lessThan: "v1.12.3",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "Reported by Darren Shepherd",
            },
         ],
         dateAssigned: "2018-11-05T00:00:00",
         datePublic: "2018-12-05T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server's TLS credentials used to establish the backend connection.",
            },
         ],
         metrics: [
            {
               cvssV3_0: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "Unchecked Error Condition",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-04-26T20:06:09",
            orgId: "a6081bf6-c852-4425-ad4f-a67919267565",
            shortName: "kubernetes",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://groups.google.com/forum/#%21topic/kubernetes-announce/GVllWCg6L88",
            },
            {
               name: "46053",
               tags: [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
               ],
               url: "https://www.exploit-db.com/exploits/46053/",
            },
            {
               name: "RHSA-2018:3549",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2018:3549",
            },
            {
               name: "RHSA-2018:3752",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2018:3752",
            },
            {
               name: "46052",
               tags: [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
               ],
               url: "https://www.exploit-db.com/exploits/46052/",
            },
            {
               name: "RHSA-2018:3624",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2018:3624",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.coalfire.com/The-Coalfire-Blog/December-2018/Kubernetes-Vulnerability-What-You-Can-Should-Do",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/kubernetes/kubernetes/issues/71411",
            },
            {
               name: "RHSA-2018:3742",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2018:3742",
            },
            {
               name: "RHSA-2018:3754",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2018:3754",
            },
            {
               name: "RHSA-2018:3537",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2018:3537",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/evict/poc_CVE-2018-1002105",
            },
            {
               name: "RHSA-2018:3598",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2018:3598",
            },
            {
               name: "RHSA-2018:3551",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2018:3551",
            },
            {
               name: "106068",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/106068",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20190416-0001/",
            },
            {
               name: "[oss-security] 20190628 Re: linux-distros membership application - Microsoft",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2019/06/28/2",
            },
            {
               name: "[oss-security] 20190706 Re: linux-distros membership application - Microsoft",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2019/07/06/3",
            },
            {
               name: "[oss-security] 20190706 Re: linux-distros membership application - Microsoft",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2019/07/06/4",
            },
            {
               name: "openSUSE-SU-2020:0554",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@kubernetes.io",
               DATE_ASSIGNED: "2018-11-05",
               ID: "CVE-2018-1002105",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Kubernetes",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "=",
                                          version_value: "v1.0.x",
                                       },
                                       {
                                          version_affected: "=",
                                          version_value: "v1.1.x",
                                       },
                                       {
                                          version_affected: "=",
                                          version_value: "v1.2.x",
                                       },
                                       {
                                          version_affected: "=",
                                          version_value: "v1.3.x",
                                       },
                                       {
                                          version_affected: "=",
                                          version_value: "v1.4.x",
                                       },
                                       {
                                          version_affected: "=",
                                          version_value: "v1.5.x",
                                       },
                                       {
                                          version_affected: "=",
                                          version_value: "v1.6.x",
                                       },
                                       {
                                          version_affected: "=",
                                          version_value: "v1.7.x",
                                       },
                                       {
                                          version_affected: "=",
                                          version_value: "v1.8.x",
                                       },
                                       {
                                          version_affected: "=",
                                          version_value: "v1.9.x",
                                       },
                                       {
                                          version_affected: "<",
                                          version_value: "v1.10.11",
                                       },
                                       {
                                          version_affected: "<",
                                          version_value: "v1.11.5",
                                       },
                                       {
                                          version_affected: "<",
                                          version_value: "v1.12.3",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Kubernetes",
                     },
                  ],
               },
            },
            credit: [
               "Reported by Darren Shepherd",
            ],
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the kube-apiserver allowed specially crafted requests to establish a connection through the Kubernetes API server to backend servers, then send arbitrary requests over the same connection directly to the backend, authenticated with the Kubernetes API server's TLS credentials used to establish the backend connection.",
                  },
               ],
            },
            impact: {
               cvss: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 9.8,
                  baseSeverity: "CRITICAL",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "Unchecked Error Condition",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://groups.google.com/forum/#!topic/kubernetes-announce/GVllWCg6L88",
                     refsource: "CONFIRM",
                     url: "https://groups.google.com/forum/#!topic/kubernetes-announce/GVllWCg6L88",
                  },
                  {
                     name: "46053",
                     refsource: "EXPLOIT-DB",
                     url: "https://www.exploit-db.com/exploits/46053/",
                  },
                  {
                     name: "RHSA-2018:3549",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2018:3549",
                  },
                  {
                     name: "RHSA-2018:3752",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2018:3752",
                  },
                  {
                     name: "46052",
                     refsource: "EXPLOIT-DB",
                     url: "https://www.exploit-db.com/exploits/46052/",
                  },
                  {
                     name: "RHSA-2018:3624",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2018:3624",
                  },
                  {
                     name: "https://www.coalfire.com/The-Coalfire-Blog/December-2018/Kubernetes-Vulnerability-What-You-Can-Should-Do",
                     refsource: "MISC",
                     url: "https://www.coalfire.com/The-Coalfire-Blog/December-2018/Kubernetes-Vulnerability-What-You-Can-Should-Do",
                  },
                  {
                     name: "https://github.com/kubernetes/kubernetes/issues/71411",
                     refsource: "CONFIRM",
                     url: "https://github.com/kubernetes/kubernetes/issues/71411",
                  },
                  {
                     name: "RHSA-2018:3742",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2018:3742",
                  },
                  {
                     name: "RHSA-2018:3754",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2018:3754",
                  },
                  {
                     name: "RHSA-2018:3537",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2018:3537",
                  },
                  {
                     name: "https://github.com/evict/poc_CVE-2018-1002105",
                     refsource: "MISC",
                     url: "https://github.com/evict/poc_CVE-2018-1002105",
                  },
                  {
                     name: "RHSA-2018:3598",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2018:3598",
                  },
                  {
                     name: "RHSA-2018:3551",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2018:3551",
                  },
                  {
                     name: "106068",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/106068",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20190416-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20190416-0001/",
                  },
                  {
                     name: "[oss-security] 20190628 Re: linux-distros membership application - Microsoft",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2019/06/28/2",
                  },
                  {
                     name: "[oss-security] 20190706 Re: linux-distros membership application - Microsoft",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2019/07/06/3",
                  },
                  {
                     name: "[oss-security] 20190706 Re: linux-distros membership application - Microsoft",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2019/07/06/4",
                  },
                  {
                     name: "openSUSE-SU-2020:0554",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "a6081bf6-c852-4425-ad4f-a67919267565",
      assignerShortName: "kubernetes",
      cveId: "CVE-2018-1002105",
      datePublished: "2018-12-05T21:00:00",
      dateReserved: "2018-12-05T00:00:00",
      dateUpdated: "2024-08-05T12:47:57.159Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2019-9512

Vulnerability from cvelistv5

Published

2019-08-13 20:50

Modified

2024-08-04 21:54

Severity ?

7.5 (High) - CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Summary

Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.

References

▼	URL	Tags
	https://kb.cert.org/vuls/id/605641/	third-party-advisory, x_refsource_CERT-VN
	https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md	x_refsource_MISC
	https://lists.apache.org/thread.html/bde52309316ae798186d783a5e29f4ad1527f61c9219a289d0eee0a7%40%3Cdev.trafficserver.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/392108390cef48af647a2e47b7fd5380e050e35ae8d1aa2030254c04%40%3Cusers.trafficserver.apache.org%3E	mailing-list, x_refsource_MLIST
	https://lists.apache.org/thread.html/ad3d01e767199c1aed8033bb6b3f5bf98c011c7c536f07a5d34b3c19%40%3Cannounce.trafficserver.apache.org%3E	mailing-list, x_refsource_MLIST
	https://seclists.org/bugtraq/2019/Aug/24	mailing-list, x_refsource_BUGTRAQ
	http://seclists.org/fulldisclosure/2019/Aug/16	mailing-list, x_refsource_FULLDISC
	https://www.synology.com/security/advisory/Synology_SA_19_33	x_refsource_CONFIRM
	https://seclists.org/bugtraq/2019/Aug/31	mailing-list, x_refsource_BUGTRAQ
	https://www.debian.org/security/2019/dsa-4503	vendor-advisory, x_refsource_DEBIAN
	https://support.f5.com/csp/article/K98053339	x_refsource_CONFIRM
	http://www.openwall.com/lists/oss-security/2019/08/20/1	mailing-list, x_refsource_MLIST
	https://security.netapp.com/advisory/ntap-20190823-0001/	x_refsource_CONFIRM
	https://security.netapp.com/advisory/ntap-20190823-0004/	x_refsource_CONFIRM
	https://security.netapp.com/advisory/ntap-20190823-0005/	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00076.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC/	vendor-advisory, x_refsource_FEDORA
	https://seclists.org/bugtraq/2019/Aug/43	mailing-list, x_refsource_BUGTRAQ
	https://www.debian.org/security/2019/dsa-4508	vendor-advisory, x_refsource_DEBIAN
	http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00002.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00011.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYO6E3H34C346D2E443GLXK7OK6KIYIQ/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4BBP27PZGSY6OP6D26E5FW4GZKBFHNU7/	vendor-advisory, x_refsource_FEDORA
	http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00021.html	vendor-advisory, x_refsource_SUSE
	https://access.redhat.com/errata/RHSA-2019:2682	vendor-advisory, x_refsource_REDHAT
	https://www.debian.org/security/2019/dsa-4520	vendor-advisory, x_refsource_DEBIAN
	https://access.redhat.com/errata/RHSA-2019:2726	vendor-advisory, x_refsource_REDHAT
	https://seclists.org/bugtraq/2019/Sep/18	mailing-list, x_refsource_BUGTRAQ
	https://access.redhat.com/errata/RHSA-2019:2594	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html	vendor-advisory, x_refsource_SUSE
	https://access.redhat.com/errata/RHSA-2019:2661	vendor-advisory, x_refsource_REDHAT
	https://kc.mcafee.com/corporate/index?page=content&id=SB10296	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2019:2690	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:2766	vendor-advisory, x_refsource_REDHAT
	http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00038.html	vendor-advisory, x_refsource_SUSE
	https://access.redhat.com/errata/RHSA-2019:2796	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:2861	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:2925	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:2939	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:2955	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:2966	vendor-advisory, x_refsource_REDHAT
	https://support.f5.com/csp/article/K98053339?utm_source=f5support&amp%3Butm_medium=RSS	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHSA-2019:3131	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:2769	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:3245	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:3265	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:3892	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:3906	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:4018	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:4019	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:4021	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:4020	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:4045	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:4042	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:4040	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:4041	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:4269	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:4273	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:4352	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2020:0406	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2020:0727	vendor-advisory, x_refsource_REDHAT
	https://usn.ubuntu.com/4308-1/	vendor-advisory, x_refsource_UBUNTU
	https://lists.debian.org/debian-lts-announce/2020/12/msg00011.html	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T21:54:44.253Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "VU#605641",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_CERT-VN",
                     "x_transferred",
                  ],
                  url: "https://kb.cert.org/vuls/id/605641/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
               },
               {
                  name: "[trafficserver-dev] 20190813 Apache Traffic Server is vulnerable to various HTTP/2 attacks",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/bde52309316ae798186d783a5e29f4ad1527f61c9219a289d0eee0a7%40%3Cdev.trafficserver.apache.org%3E",
               },
               {
                  name: "[trafficserver-users] 20190813 Apache Traffic Server is vulnerable to various HTTP/2 attacks",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/392108390cef48af647a2e47b7fd5380e050e35ae8d1aa2030254c04%40%3Cusers.trafficserver.apache.org%3E",
               },
               {
                  name: "[trafficserver-announce] 20190813 Apache Traffic Server is vulnerable to various HTTP/2 attacks",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.apache.org/thread.html/ad3d01e767199c1aed8033bb6b3f5bf98c011c7c536f07a5d34b3c19%40%3Cannounce.trafficserver.apache.org%3E",
               },
               {
                  name: "20190814 APPLE-SA-2019-08-13-5 SwiftNIO HTTP/2 1.5.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "https://seclists.org/bugtraq/2019/Aug/24",
               },
               {
                  name: "20190816 APPLE-SA-2019-08-13-5 SwiftNIO HTTP/2 1.5.0",
                  tags: [
                     "mailing-list",
                     "x_refsource_FULLDISC",
                     "x_transferred",
                  ],
                  url: "http://seclists.org/fulldisclosure/2019/Aug/16",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://www.synology.com/security/advisory/Synology_SA_19_33",
               },
               {
                  name: "20190819 [SECURITY] [DSA 4503-1] golang-1.11 security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "https://seclists.org/bugtraq/2019/Aug/31",
               },
               {
                  name: "DSA-4503",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2019/dsa-4503",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.f5.com/csp/article/K98053339",
               },
               {
                  name: "[oss-security] 20190819 [ANNOUNCE] Security release of Kubernetes v1.15.3, v1.14.6, v1.13.10 - CVE-2019-9512 and CVE-2019-9514",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2019/08/20/1",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20190823-0001/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20190823-0004/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20190823-0005/",
               },
               {
                  name: "openSUSE-SU-2019:2000",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00076.html",
               },
               {
                  name: "FEDORA-2019-5a6a7bc12c",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP/",
               },
               {
                  name: "FEDORA-2019-6a2980de56",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC/",
               },
               {
                  name: "20190825 [SECURITY] [DSA 4508-1] h2o security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "https://seclists.org/bugtraq/2019/Aug/43",
               },
               {
                  name: "DSA-4508",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2019/dsa-4508",
               },
               {
                  name: "openSUSE-SU-2019:2056",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00002.html",
               },
               {
                  name: "openSUSE-SU-2019:2072",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00011.html",
               },
               {
                  name: "FEDORA-2019-55d101a740",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYO6E3H34C346D2E443GLXK7OK6KIYIQ/",
               },
               {
                  name: "FEDORA-2019-65db7ad6c7",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4BBP27PZGSY6OP6D26E5FW4GZKBFHNU7/",
               },
               {
                  name: "openSUSE-SU-2019:2085",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00021.html",
               },
               {
                  name: "RHSA-2019:2682",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:2682",
               },
               {
                  name: "DSA-4520",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "https://www.debian.org/security/2019/dsa-4520",
               },
               {
                  name: "RHSA-2019:2726",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:2726",
               },
               {
                  name: "20190910 [SECURITY] [DSA 4520-1] trafficserver security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "https://seclists.org/bugtraq/2019/Sep/18",
               },
               {
                  name: "RHSA-2019:2594",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:2594",
               },
               {
                  name: "openSUSE-SU-2019:2114",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html",
               },
               {
                  name: "openSUSE-SU-2019:2115",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html",
               },
               {
                  name: "RHSA-2019:2661",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:2661",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10296",
               },
               {
                  name: "RHSA-2019:2690",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:2690",
               },
               {
                  name: "RHSA-2019:2766",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:2766",
               },
               {
                  name: "openSUSE-SU-2019:2130",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00038.html",
               },
               {
                  name: "RHSA-2019:2796",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:2796",
               },
               {
                  name: "RHSA-2019:2861",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:2861",
               },
               {
                  name: "RHSA-2019:2925",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:2925",
               },
               {
                  name: "RHSA-2019:2939",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:2939",
               },
               {
                  name: "RHSA-2019:2955",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:2955",
               },
               {
                  name: "RHSA-2019:2966",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:2966",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://support.f5.com/csp/article/K98053339?utm_source=f5support&amp%3Butm_medium=RSS",
               },
               {
                  name: "RHSA-2019:3131",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:3131",
               },
               {
                  name: "RHSA-2019:2769",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:2769",
               },
               {
                  name: "RHSA-2019:3245",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:3245",
               },
               {
                  name: "RHSA-2019:3265",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:3265",
               },
               {
                  name: "RHSA-2019:3892",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:3892",
               },
               {
                  name: "RHSA-2019:3906",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:3906",
               },
               {
                  name: "RHSA-2019:4018",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:4018",
               },
               {
                  name: "RHSA-2019:4019",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:4019",
               },
               {
                  name: "RHSA-2019:4021",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:4021",
               },
               {
                  name: "RHSA-2019:4020",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:4020",
               },
               {
                  name: "RHSA-2019:4045",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:4045",
               },
               {
                  name: "RHSA-2019:4042",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:4042",
               },
               {
                  name: "RHSA-2019:4040",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:4040",
               },
               {
                  name: "RHSA-2019:4041",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:4041",
               },
               {
                  name: "RHSA-2019:4269",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:4269",
               },
               {
                  name: "RHSA-2019:4273",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:4273",
               },
               {
                  name: "RHSA-2019:4352",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:4352",
               },
               {
                  name: "RHSA-2020:0406",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2020:0406",
               },
               {
                  name: "RHSA-2020:0727",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2020:0727",
               },
               {
                  name: "USN-4308-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "https://usn.ubuntu.com/4308-1/",
               },
               {
                  name: "[debian-lts-announce] 20201208 [SECURITY] [DLA 2485-1] golang-golang-x-net-dev security update",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00011.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "Thanks to Jonathan Looney of Netflix for reporting this vulnerability.",
            },
         ],
         descriptions: [
            {
               lang: "en",
               value: "Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.",
            },
         ],
         metrics: [
            {
               cvssV3_0: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-400",
                     description: "CWE-400 Uncontrolled Resource Consumption",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-12-08T23:06:27",
            orgId: "37e5125f-f79b-445b-8fad-9564f167944b",
            shortName: "certcc",
         },
         references: [
            {
               name: "VU#605641",
               tags: [
                  "third-party-advisory",
                  "x_refsource_CERT-VN",
               ],
               url: "https://kb.cert.org/vuls/id/605641/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
            },
            {
               name: "[trafficserver-dev] 20190813 Apache Traffic Server is vulnerable to various HTTP/2 attacks",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/bde52309316ae798186d783a5e29f4ad1527f61c9219a289d0eee0a7%40%3Cdev.trafficserver.apache.org%3E",
            },
            {
               name: "[trafficserver-users] 20190813 Apache Traffic Server is vulnerable to various HTTP/2 attacks",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/392108390cef48af647a2e47b7fd5380e050e35ae8d1aa2030254c04%40%3Cusers.trafficserver.apache.org%3E",
            },
            {
               name: "[trafficserver-announce] 20190813 Apache Traffic Server is vulnerable to various HTTP/2 attacks",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.apache.org/thread.html/ad3d01e767199c1aed8033bb6b3f5bf98c011c7c536f07a5d34b3c19%40%3Cannounce.trafficserver.apache.org%3E",
            },
            {
               name: "20190814 APPLE-SA-2019-08-13-5 SwiftNIO HTTP/2 1.5.0",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "https://seclists.org/bugtraq/2019/Aug/24",
            },
            {
               name: "20190816 APPLE-SA-2019-08-13-5 SwiftNIO HTTP/2 1.5.0",
               tags: [
                  "mailing-list",
                  "x_refsource_FULLDISC",
               ],
               url: "http://seclists.org/fulldisclosure/2019/Aug/16",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://www.synology.com/security/advisory/Synology_SA_19_33",
            },
            {
               name: "20190819 [SECURITY] [DSA 4503-1] golang-1.11 security update",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "https://seclists.org/bugtraq/2019/Aug/31",
            },
            {
               name: "DSA-4503",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2019/dsa-4503",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.f5.com/csp/article/K98053339",
            },
            {
               name: "[oss-security] 20190819 [ANNOUNCE] Security release of Kubernetes v1.15.3, v1.14.6, v1.13.10 - CVE-2019-9512 and CVE-2019-9514",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2019/08/20/1",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20190823-0001/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20190823-0004/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20190823-0005/",
            },
            {
               name: "openSUSE-SU-2019:2000",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00076.html",
            },
            {
               name: "FEDORA-2019-5a6a7bc12c",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP/",
            },
            {
               name: "FEDORA-2019-6a2980de56",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC/",
            },
            {
               name: "20190825 [SECURITY] [DSA 4508-1] h2o security update",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "https://seclists.org/bugtraq/2019/Aug/43",
            },
            {
               name: "DSA-4508",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2019/dsa-4508",
            },
            {
               name: "openSUSE-SU-2019:2056",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00002.html",
            },
            {
               name: "openSUSE-SU-2019:2072",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00011.html",
            },
            {
               name: "FEDORA-2019-55d101a740",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LYO6E3H34C346D2E443GLXK7OK6KIYIQ/",
            },
            {
               name: "FEDORA-2019-65db7ad6c7",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4BBP27PZGSY6OP6D26E5FW4GZKBFHNU7/",
            },
            {
               name: "openSUSE-SU-2019:2085",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00021.html",
            },
            {
               name: "RHSA-2019:2682",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:2682",
            },
            {
               name: "DSA-4520",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "https://www.debian.org/security/2019/dsa-4520",
            },
            {
               name: "RHSA-2019:2726",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:2726",
            },
            {
               name: "20190910 [SECURITY] [DSA 4520-1] trafficserver security update",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "https://seclists.org/bugtraq/2019/Sep/18",
            },
            {
               name: "RHSA-2019:2594",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:2594",
            },
            {
               name: "openSUSE-SU-2019:2114",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html",
            },
            {
               name: "openSUSE-SU-2019:2115",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html",
            },
            {
               name: "RHSA-2019:2661",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:2661",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10296",
            },
            {
               name: "RHSA-2019:2690",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:2690",
            },
            {
               name: "RHSA-2019:2766",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:2766",
            },
            {
               name: "openSUSE-SU-2019:2130",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00038.html",
            },
            {
               name: "RHSA-2019:2796",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:2796",
            },
            {
               name: "RHSA-2019:2861",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:2861",
            },
            {
               name: "RHSA-2019:2925",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:2925",
            },
            {
               name: "RHSA-2019:2939",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:2939",
            },
            {
               name: "RHSA-2019:2955",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:2955",
            },
            {
               name: "RHSA-2019:2966",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:2966",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://support.f5.com/csp/article/K98053339?utm_source=f5support&amp%3Butm_medium=RSS",
            },
            {
               name: "RHSA-2019:3131",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:3131",
            },
            {
               name: "RHSA-2019:2769",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:2769",
            },
            {
               name: "RHSA-2019:3245",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:3245",
            },
            {
               name: "RHSA-2019:3265",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:3265",
            },
            {
               name: "RHSA-2019:3892",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:3892",
            },
            {
               name: "RHSA-2019:3906",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:3906",
            },
            {
               name: "RHSA-2019:4018",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:4018",
            },
            {
               name: "RHSA-2019:4019",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:4019",
            },
            {
               name: "RHSA-2019:4021",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:4021",
            },
            {
               name: "RHSA-2019:4020",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:4020",
            },
            {
               name: "RHSA-2019:4045",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:4045",
            },
            {
               name: "RHSA-2019:4042",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:4042",
            },
            {
               name: "RHSA-2019:4040",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:4040",
            },
            {
               name: "RHSA-2019:4041",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:4041",
            },
            {
               name: "RHSA-2019:4269",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:4269",
            },
            {
               name: "RHSA-2019:4273",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:4273",
            },
            {
               name: "RHSA-2019:4352",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:4352",
            },
            {
               name: "RHSA-2020:0406",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2020:0406",
            },
            {
               name: "RHSA-2020:0727",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2020:0727",
            },
            {
               name: "USN-4308-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "https://usn.ubuntu.com/4308-1/",
            },
            {
               name: "[debian-lts-announce] 20201208 [SECURITY] [DLA 2485-1] golang-golang-x-net-dev security update",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00011.html",
            },
         ],
         source: {
            discovery: "UNKNOWN",
         },
         title: "Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service",
         x_generator: {
            engine: "Vulnogram 0.0.7",
         },
         x_legacyV4Record: {
            CVE_data_meta: {
               AKA: "HTTP/2 Ping Flood",
               ASSIGNER: "cert@cert.org",
               ID: "CVE-2019-9512",
               STATE: "PUBLIC",
               TITLE: "Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            credit: [
               {
                  lang: "eng",
                  value: "Thanks to Jonathan Looney of Netflix for reporting this vulnerability.",
               },
            ],
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Some HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service. The attacker sends continual pings to an HTTP/2 peer, causing the peer to build an internal queue of responses. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.",
                  },
               ],
            },
            generator: {
               engine: "Vulnogram 0.0.7",
            },
            impact: {
               cvss: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 7.5,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "NONE",
                  integrityImpact: "NONE",
                  privilegesRequired: "NONE",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                  version: "3.0",
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-400 Uncontrolled Resource Consumption",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "VU#605641",
                     refsource: "CERT-VN",
                     url: "https://kb.cert.org/vuls/id/605641/",
                  },
                  {
                     name: "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
                     refsource: "MISC",
                     url: "https://github.com/Netflix/security-bulletins/blob/master/advisories/third-party/2019-002.md",
                  },
                  {
                     name: "[trafficserver-dev] 20190813 Apache Traffic Server is vulnerable to various HTTP/2 attacks",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/bde52309316ae798186d783a5e29f4ad1527f61c9219a289d0eee0a7@%3Cdev.trafficserver.apache.org%3E",
                  },
                  {
                     name: "[trafficserver-users] 20190813 Apache Traffic Server is vulnerable to various HTTP/2 attacks",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/392108390cef48af647a2e47b7fd5380e050e35ae8d1aa2030254c04@%3Cusers.trafficserver.apache.org%3E",
                  },
                  {
                     name: "[trafficserver-announce] 20190813 Apache Traffic Server is vulnerable to various HTTP/2 attacks",
                     refsource: "MLIST",
                     url: "https://lists.apache.org/thread.html/ad3d01e767199c1aed8033bb6b3f5bf98c011c7c536f07a5d34b3c19@%3Cannounce.trafficserver.apache.org%3E",
                  },
                  {
                     name: "20190814 APPLE-SA-2019-08-13-5 SwiftNIO HTTP/2 1.5.0",
                     refsource: "BUGTRAQ",
                     url: "https://seclists.org/bugtraq/2019/Aug/24",
                  },
                  {
                     name: "20190816 APPLE-SA-2019-08-13-5 SwiftNIO HTTP/2 1.5.0",
                     refsource: "FULLDISC",
                     url: "http://seclists.org/fulldisclosure/2019/Aug/16",
                  },
                  {
                     name: "https://www.synology.com/security/advisory/Synology_SA_19_33",
                     refsource: "CONFIRM",
                     url: "https://www.synology.com/security/advisory/Synology_SA_19_33",
                  },
                  {
                     name: "20190819 [SECURITY] [DSA 4503-1] golang-1.11 security update",
                     refsource: "BUGTRAQ",
                     url: "https://seclists.org/bugtraq/2019/Aug/31",
                  },
                  {
                     name: "DSA-4503",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2019/dsa-4503",
                  },
                  {
                     name: "https://support.f5.com/csp/article/K98053339",
                     refsource: "CONFIRM",
                     url: "https://support.f5.com/csp/article/K98053339",
                  },
                  {
                     name: "[oss-security] 20190819 [ANNOUNCE] Security release of Kubernetes v1.15.3, v1.14.6, v1.13.10 - CVE-2019-9512 and CVE-2019-9514",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2019/08/20/1",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20190823-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20190823-0001/",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20190823-0004/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20190823-0004/",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20190823-0005/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20190823-0005/",
                  },
                  {
                     name: "openSUSE-SU-2019:2000",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00076.html",
                  },
                  {
                     name: "FEDORA-2019-5a6a7bc12c",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CMNFX5MNYRWWIMO4BTKYQCGUDMHO3AXP/",
                  },
                  {
                     name: "FEDORA-2019-6a2980de56",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4ZQGHE3WTYLYAYJEIDJVF2FIGQTAYPMC/",
                  },
                  {
                     name: "20190825 [SECURITY] [DSA 4508-1] h2o security update",
                     refsource: "BUGTRAQ",
                     url: "https://seclists.org/bugtraq/2019/Aug/43",
                  },
                  {
                     name: "DSA-4508",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2019/dsa-4508",
                  },
                  {
                     name: "openSUSE-SU-2019:2056",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00002.html",
                  },
                  {
                     name: "openSUSE-SU-2019:2072",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00011.html",
                  },
                  {
                     name: "FEDORA-2019-55d101a740",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LYO6E3H34C346D2E443GLXK7OK6KIYIQ/",
                  },
                  {
                     name: "FEDORA-2019-65db7ad6c7",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4BBP27PZGSY6OP6D26E5FW4GZKBFHNU7/",
                  },
                  {
                     name: "openSUSE-SU-2019:2085",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00021.html",
                  },
                  {
                     name: "RHSA-2019:2682",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:2682",
                  },
                  {
                     name: "DSA-4520",
                     refsource: "DEBIAN",
                     url: "https://www.debian.org/security/2019/dsa-4520",
                  },
                  {
                     name: "RHSA-2019:2726",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:2726",
                  },
                  {
                     name: "20190910 [SECURITY] [DSA 4520-1] trafficserver security update",
                     refsource: "BUGTRAQ",
                     url: "https://seclists.org/bugtraq/2019/Sep/18",
                  },
                  {
                     name: "RHSA-2019:2594",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:2594",
                  },
                  {
                     name: "openSUSE-SU-2019:2114",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00032.html",
                  },
                  {
                     name: "openSUSE-SU-2019:2115",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00031.html",
                  },
                  {
                     name: "RHSA-2019:2661",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:2661",
                  },
                  {
                     name: "https://kc.mcafee.com/corporate/index?page=content&id=SB10296",
                     refsource: "CONFIRM",
                     url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10296",
                  },
                  {
                     name: "RHSA-2019:2690",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:2690",
                  },
                  {
                     name: "RHSA-2019:2766",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:2766",
                  },
                  {
                     name: "openSUSE-SU-2019:2130",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2019-09/msg00038.html",
                  },
                  {
                     name: "RHSA-2019:2796",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:2796",
                  },
                  {
                     name: "RHSA-2019:2861",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:2861",
                  },
                  {
                     name: "RHSA-2019:2925",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:2925",
                  },
                  {
                     name: "RHSA-2019:2939",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:2939",
                  },
                  {
                     name: "RHSA-2019:2955",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:2955",
                  },
                  {
                     name: "RHSA-2019:2966",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:2966",
                  },
                  {
                     name: "https://support.f5.com/csp/article/K98053339?utm_source=f5support&amp;utm_medium=RSS",
                     refsource: "CONFIRM",
                     url: "https://support.f5.com/csp/article/K98053339?utm_source=f5support&amp;utm_medium=RSS",
                  },
                  {
                     name: "RHSA-2019:3131",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:3131",
                  },
                  {
                     name: "RHSA-2019:2769",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:2769",
                  },
                  {
                     name: "RHSA-2019:3245",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:3245",
                  },
                  {
                     name: "RHSA-2019:3265",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:3265",
                  },
                  {
                     name: "RHSA-2019:3892",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:3892",
                  },
                  {
                     name: "RHSA-2019:3906",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:3906",
                  },
                  {
                     name: "RHSA-2019:4018",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:4018",
                  },
                  {
                     name: "RHSA-2019:4019",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:4019",
                  },
                  {
                     name: "RHSA-2019:4021",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:4021",
                  },
                  {
                     name: "RHSA-2019:4020",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:4020",
                  },
                  {
                     name: "RHSA-2019:4045",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:4045",
                  },
                  {
                     name: "RHSA-2019:4042",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:4042",
                  },
                  {
                     name: "RHSA-2019:4040",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:4040",
                  },
                  {
                     name: "RHSA-2019:4041",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:4041",
                  },
                  {
                     name: "RHSA-2019:4269",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:4269",
                  },
                  {
                     name: "RHSA-2019:4273",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:4273",
                  },
                  {
                     name: "RHSA-2019:4352",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:4352",
                  },
                  {
                     name: "RHSA-2020:0406",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2020:0406",
                  },
                  {
                     name: "RHSA-2020:0727",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2020:0727",
                  },
                  {
                     name: "USN-4308-1",
                     refsource: "UBUNTU",
                     url: "https://usn.ubuntu.com/4308-1/",
                  },
                  {
                     name: "[debian-lts-announce] 20201208 [SECURITY] [DLA 2485-1] golang-golang-x-net-dev security update",
                     refsource: "MLIST",
                     url: "https://lists.debian.org/debian-lts-announce/2020/12/msg00011.html",
                  },
               ],
            },
            source: {
               discovery: "UNKNOWN",
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "37e5125f-f79b-445b-8fad-9564f167944b",
      assignerShortName: "certcc",
      cveId: "CVE-2019-9512",
      datePublished: "2019-08-13T20:50:59",
      dateReserved: "2019-03-01T00:00:00",
      dateUpdated: "2024-08-04T21:54:44.253Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2019-11247

Vulnerability from cvelistv5

Published

2019-08-29 00:25

Modified

2024-09-16 18:04

Severity ?

5.0 (Medium) - CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

Summary

The Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced. Authorizations for the resource accessed in this manner are enforced using roles and role bindings within the namespace, meaning that a user with access only to a resource in one namespace could create, view update or delete the cluster-scoped resource (according to their namespace role privileges). Kubernetes affected versions include versions prior to 1.13.9, versions prior to 1.14.5, versions prior to 1.15.2, and versions 1.7, 1.8, 1.9, 1.10, 1.11, 1.12.

References

▼	URL	Tags
	https://github.com/kubernetes/kubernetes/issues/80983	x_refsource_CONFIRM
	https://groups.google.com/d/msg/kubernetes-security-announce/vUtEcSEY6SM/v2ZZxsmtFQAJ	mailing-list, x_refsource_MLIST
	https://access.redhat.com/errata/RHSA-2019:2690	vendor-advisory, x_refsource_REDHAT
	https://security.netapp.com/advisory/ntap-20190919-0003/	x_refsource_CONFIRM
	https://access.redhat.com/errata/RHBA-2019:2816	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHBA-2019:2824	vendor-advisory, x_refsource_REDHAT
	https://access.redhat.com/errata/RHSA-2019:2769	vendor-advisory, x_refsource_REDHAT

Impacted products

	Vendor	Product	Version
	Kubernetes	Kubernetes	Version: prior to 1.13.9 Version: prior to 1.14.5 Version: prior to 1.15.2 Version: 1.7 Version: 1.8 Version: 1.9 Version: 1.10 Version: 1.11 Version: 1.12

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-04T22:48:09.018Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/kubernetes/kubernetes/issues/80983",
               },
               {
                  name: "v1.13.9, v1.14.5, v1.15.2 released to address CVE-2019-11247, CVE-2019-11249",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "https://groups.google.com/d/msg/kubernetes-security-announce/vUtEcSEY6SM/v2ZZxsmtFQAJ",
               },
               {
                  name: "RHSA-2019:2690",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:2690",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20190919-0003/",
               },
               {
                  name: "RHBA-2019:2816",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHBA-2019:2816",
               },
               {
                  name: "RHBA-2019:2824",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHBA-2019:2824",
               },
               {
                  name: "RHSA-2019:2769",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2019:2769",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Kubernetes",
               vendor: "Kubernetes",
               versions: [
                  {
                     status: "affected",
                     version: "prior to 1.13.9",
                  },
                  {
                     status: "affected",
                     version: "prior to 1.14.5",
                  },
                  {
                     status: "affected",
                     version: "prior to 1.15.2",
                  },
                  {
                     status: "affected",
                     version: "1.7",
                  },
                  {
                     status: "affected",
                     version: "1.8",
                  },
                  {
                     status: "affected",
                     version: "1.9",
                  },
                  {
                     status: "affected",
                     version: "1.10",
                  },
                  {
                     status: "affected",
                     version: "1.11",
                  },
                  {
                     status: "affected",
                     version: "1.12",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "Prabu Shyam, Verizon Media",
            },
         ],
         datePublic: "2019-08-05T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "The Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced. Authorizations for the resource accessed in this manner are enforced using roles and role bindings within the namespace, meaning that a user with access only to a resource in one namespace could create, view update or delete the cluster-scoped resource (according to their namespace role privileges). Kubernetes affected versions include versions prior to 1.13.9, versions prior to 1.14.5, versions prior to 1.15.2, and versions 1.7, 1.8, 1.9, 1.10, 1.11, 1.12.",
            },
         ],
         metrics: [
            {
               cvssV3_0: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "LOW",
                  baseScore: 5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "LOW",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     cweId: "CWE-20",
                     description: "CWE-20: Improper Input Validation",
                     lang: "en",
                     type: "CWE",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2019-10-24T22:06:25",
            orgId: "a6081bf6-c852-4425-ad4f-a67919267565",
            shortName: "kubernetes",
         },
         references: [
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/kubernetes/kubernetes/issues/80983",
            },
            {
               name: "v1.13.9, v1.14.5, v1.15.2 released to address CVE-2019-11247, CVE-2019-11249",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "https://groups.google.com/d/msg/kubernetes-security-announce/vUtEcSEY6SM/v2ZZxsmtFQAJ",
            },
            {
               name: "RHSA-2019:2690",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:2690",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20190919-0003/",
            },
            {
               name: "RHBA-2019:2816",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHBA-2019:2816",
            },
            {
               name: "RHBA-2019:2824",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHBA-2019:2824",
            },
            {
               name: "RHSA-2019:2769",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2019:2769",
            },
         ],
         source: {
            defect: [
               "https://github.com/kubernetes/kubernetes/issues/80983",
            ],
            discovery: "USER",
         },
         title: "Kubernetes kube-apiserver allows access to custom resources via wrong scope",
         workarounds: [
            {
               lang: "en",
               value: "To mitigate, remove authorization rules that grant access to cluster-scoped resources within namespaces. For example, RBAC roles and clusterroles intended to be referenced by namespaced rolebindings should not grant access to resources:[*], apiGroups:[*], or grant access to cluster-scoped custom resources.",
            },
         ],
         x_generator: {
            engine: "Vulnogram 0.0.7",
         },
         x_legacyV4Record: {
            CVE_data_meta: {
               AKA: "",
               ASSIGNER: "security@kubernetes.io",
               DATE_PUBLIC: "2019-08-05",
               ID: "CVE-2019-11247",
               STATE: "PUBLIC",
               TITLE: "Kubernetes kube-apiserver allows access to custom resources via wrong scope",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Kubernetes",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "prior to 1.13.9",
                                       },
                                       {
                                          version_value: "prior to 1.14.5",
                                       },
                                       {
                                          version_value: "prior to 1.15.2",
                                       },
                                       {
                                          version_value: "1.7",
                                       },
                                       {
                                          version_value: "1.8",
                                       },
                                       {
                                          version_value: "1.9",
                                       },
                                       {
                                          version_value: "1.10",
                                       },
                                       {
                                          version_value: "1.11",
                                       },
                                       {
                                          version_value: "1.12",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Kubernetes",
                     },
                  ],
               },
            },
            configuration: [],
            credit: [
               {
                  lang: "eng",
                  value: "Prabu Shyam, Verizon Media",
               },
            ],
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "The Kubernetes kube-apiserver mistakenly allows access to a cluster-scoped custom resource if the request is made as if the resource were namespaced. Authorizations for the resource accessed in this manner are enforced using roles and role bindings within the namespace, meaning that a user with access only to a resource in one namespace could create, view update or delete the cluster-scoped resource (according to their namespace role privileges). Kubernetes affected versions include versions prior to 1.13.9, versions prior to 1.14.5, versions prior to 1.15.2, and versions 1.7, 1.8, 1.9, 1.10, 1.11, 1.12.",
                  },
               ],
            },
            exploit: [],
            generator: {
               engine: "Vulnogram 0.0.7",
            },
            impact: {
               cvss: {
                  attackComplexity: "HIGH",
                  attackVector: "NETWORK",
                  availabilityImpact: "LOW",
                  baseScore: 5,
                  baseSeverity: "MEDIUM",
                  confidentialityImpact: "LOW",
                  integrityImpact: "LOW",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L",
                  version: "3.0",
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "CWE-20: Improper Input Validation",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "https://github.com/kubernetes/kubernetes/issues/80983",
                     refsource: "CONFIRM",
                     url: "https://github.com/kubernetes/kubernetes/issues/80983",
                  },
                  {
                     name: "v1.13.9, v1.14.5, v1.15.2 released to address CVE-2019-11247, CVE-2019-11249",
                     refsource: "MLIST",
                     url: "https://groups.google.com/d/msg/kubernetes-security-announce/vUtEcSEY6SM/v2ZZxsmtFQAJ",
                  },
                  {
                     name: "RHSA-2019:2690",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:2690",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20190919-0003/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20190919-0003/",
                  },
                  {
                     name: "RHBA-2019:2816",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHBA-2019:2816",
                  },
                  {
                     name: "RHBA-2019:2824",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHBA-2019:2824",
                  },
                  {
                     name: "RHSA-2019:2769",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2019:2769",
                  },
               ],
            },
            solution: [],
            source: {
               advisory: "",
               defect: [
                  "https://github.com/kubernetes/kubernetes/issues/80983",
               ],
               discovery: "USER",
            },
            work_around: [
               {
                  lang: "en",
                  value: "To mitigate, remove authorization rules that grant access to cluster-scoped resources within namespaces. For example, RBAC roles and clusterroles intended to be referenced by namespaced rolebindings should not grant access to resources:[*], apiGroups:[*], or grant access to cluster-scoped custom resources.",
               },
            ],
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "a6081bf6-c852-4425-ad4f-a67919267565",
      assignerShortName: "kubernetes",
      cveId: "CVE-2019-11247",
      datePublished: "2019-08-29T00:25:27.667656Z",
      dateReserved: "2019-04-17T00:00:00",
      dateUpdated: "2024-09-16T18:04:25.053Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2016-5195

Vulnerability from cvelistv5

Published

2016-11-10 21:00

Modified

2025-01-29 17:18

Severity ?

7.0 (High) - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka "Dirty COW."

References

▼	URL	Tags
	http://rhn.redhat.com/errata/RHSA-2016-2107.html	vendor-advisory, x_refsource_REDHAT
	https://www.exploit-db.com/exploits/40616/	exploit, x_refsource_EXPLOIT-DB
	https://access.redhat.com/errata/RHSA-2017:0372	vendor-advisory, x_refsource_REDHAT
	https://bto.bluecoat.com/security-advisory/sa134	x_refsource_CONFIRM
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05352241	x_refsource_CONFIRM
	http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html	x_refsource_CONFIRM
	https://www.exploit-db.com/exploits/40839/	exploit, x_refsource_EXPLOIT-DB
	https://dirtycow.ninja	x_refsource_MISC
	https://www.exploit-db.com/exploits/40847/	exploit, x_refsource_EXPLOIT-DB
	http://rhn.redhat.com/errata/RHSA-2016-2118.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2016-2128.html	vendor-advisory, x_refsource_REDHAT
	https://source.android.com/security/bulletin/2016-12-01.html	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2120.html	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2016/10/26/7	mailing-list, x_refsource_MLIST
	http://rhn.redhat.com/errata/RHSA-2016-2133.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2016-2098.html	vendor-advisory, x_refsource_REDHAT
	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03761en_us	x_refsource_CONFIRM
	https://www.kb.cert.org/vuls/id/243144	third-party-advisory, x_refsource_CERT-VN
	https://bugzilla.suse.com/show_bug.cgi?id=1004418	x_refsource_CONFIRM
	http://www.securitytracker.com/id/1037078	vdb-entry, x_refsource_SECTRACK
	https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-5195.html	x_refsource_CONFIRM
	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03722en_us	x_refsource_CONFIRM
	https://security.netapp.com/advisory/ntap-20161025-0001/	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/93793	vdb-entry, x_refsource_BID
	http://rhn.redhat.com/errata/RHSA-2016-2127.html	vendor-advisory, x_refsource_REDHAT
	https://security-tracker.debian.org/tracker/CVE-2016-5195	x_refsource_CONFIRM
	https://github.com/dirtycow/dirtycow.github.io/wiki/PoCs	x_refsource_MISC
	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03742en_us	x_refsource_CONFIRM
	https://github.com/torvalds/linux/commit/19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619	x_refsource_CONFIRM
	https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes	x_refsource_CONFIRM
	https://github.com/dirtycow/dirtycow.github.io/wiki/VulnerabilityDetails	x_refsource_MISC
	https://bugzilla.redhat.com/show_bug.cgi?id=1384344	x_refsource_CONFIRM
	https://access.redhat.com/security/vulnerabilities/2706661	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2106.html	vendor-advisory, x_refsource_REDHAT
	http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619	x_refsource_CONFIRM
	https://www.exploit-db.com/exploits/40611/	exploit, x_refsource_EXPLOIT-DB
	https://access.redhat.com/security/cve/cve-2016-5195	x_refsource_CONFIRM
	https://source.android.com/security/bulletin/2016-11-01.html	x_refsource_CONFIRM
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05347541	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2124.html	vendor-advisory, x_refsource_REDHAT
	http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.3	x_refsource_CONFIRM
	http://rhn.redhat.com/errata/RHSA-2016-2105.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2016-2126.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2016-2132.html	vendor-advisory, x_refsource_REDHAT
	http://rhn.redhat.com/errata/RHSA-2016-2110.html	vendor-advisory, x_refsource_REDHAT
	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03707en_us	x_refsource_CONFIRM
	https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05341463	x_refsource_CONFIRM
	https://kc.mcafee.com/corporate/index?page=content&id=SB10176	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00055.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00067.html	vendor-advisory, x_refsource_SUSE
	http://www.openwall.com/lists/oss-security/2016/10/27/13	mailing-list, x_refsource_MLIST
	http://www.ubuntu.com/usn/USN-3106-2	vendor-advisory, x_refsource_UBUNTU
	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00034.html	vendor-advisory, x_refsource_SUSE
	http://packetstormsecurity.com/files/139277/Kernel-Live-Patch-Security-Notice-LSN-0012-1.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00053.html	vendor-advisory, x_refsource_SUSE
	http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161207-01-dirtycow-en	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00058.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00035.html	vendor-advisory, x_refsource_SUSE
	http://packetstormsecurity.com/files/142151/Kernel-Live-Patch-Security-Notice-LSN-0021-1.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00066.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00051.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-3106-3	vendor-advisory, x_refsource_UBUNTU
	https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05352241	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00064.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W3APRVDVPDBXLH4DC5UKZVCR742MJIM3/	vendor-advisory, x_refsource_FEDORA
	http://www.securityfocus.com/archive/1/archive/1/540736/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00057.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00040.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00054.html	vendor-advisory, x_refsource_SUSE
	https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-vcsd	vendor-advisory, x_refsource_CISCO
	http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-linux	vendor-advisory, x_refsource_CISCO
	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10770	x_refsource_CONFIRM
	https://kc.mcafee.com/corporate/index?page=content&id=SB10177	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00065.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00045.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-3105-2	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-3107-1	vendor-advisory, x_refsource_UBUNTU
	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10774	x_refsource_CONFIRM
	http://www.ubuntu.com/usn/USN-3107-2	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/archive/1/540344/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00048.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-3106-1	vendor-advisory, x_refsource_UBUNTU
	http://www.ubuntu.com/usn/USN-3106-4	vendor-advisory, x_refsource_UBUNTU
	http://www.openwall.com/lists/oss-security/2016/10/30/1	mailing-list, x_refsource_MLIST
	http://packetstormsecurity.com/files/139923/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00072.html	vendor-advisory, x_refsource_SUSE
	http://www.ubuntu.com/usn/USN-3104-2	vendor-advisory, x_refsource_UBUNTU
	http://fortiguard.com/advisory/FG-IR-16-063	x_refsource_CONFIRM
	http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10807	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00049.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/archive/1/539611/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://packetstormsecurity.com/files/139922/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00052.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/archive/1/archive/1/540252/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.ubuntu.com/usn/USN-3105-1	vendor-advisory, x_refsource_UBUNTU
	http://packetstormsecurity.com/files/139286/DirtyCow-Linux-Kernel-Race-Condition.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00050.html	vendor-advisory, x_refsource_SUSE
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E7M62SRP6CZLJ4ZXCRZKV4WPLQBSR7DT/	vendor-advisory, x_refsource_FEDORA
	https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NWMDLBWMGZKFHMRJ7QUQVCERP5QHDB6W/	vendor-advisory, x_refsource_FEDORA
	http://www.openwall.com/lists/oss-security/2016/11/03/7	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00056.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00033.html	vendor-advisory, x_refsource_SUSE
	https://kc.mcafee.com/corporate/index?page=content&id=SB10222	x_refsource_CONFIRM
	http://www.debian.org/security/2016/dsa-3696	vendor-advisory, x_refsource_DEBIAN
	http://packetstormsecurity.com/files/139287/DirtyCow-Local-Root-Proof-Of-Concept.html	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00038.html	vendor-advisory, x_refsource_SUSE
	http://www.securityfocus.com/archive/1/archive/1/540344/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.securityfocus.com/archive/1/archive/1/539611/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.ubuntu.com/usn/USN-3104-1	vendor-advisory, x_refsource_UBUNTU
	http://www.securityfocus.com/archive/1/540736/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00039.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00100.html	vendor-advisory, x_refsource_SUSE
	http://www.openwall.com/lists/oss-security/2016/10/21/1	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/archive/1/540252/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00036.html	vendor-advisory, x_refsource_SUSE
	http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html	vendor-advisory, x_refsource_SUSE
	https://security.paloaltonetworks.com/CVE-2016-5195	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html	vendor-advisory, x_refsource_SUSE
	https://www.arista.com/en/support/advisories-notices/security-advisories/1753-security-advisory-0026	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2022/03/07/1	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2022/08/08/2	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2022/08/08/1	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2022/08/08/7	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2022/08/08/8	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2022/08/09/4	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2022/08/15/1	mailing-list, x_refsource_MLIST

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T00:53:48.930Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2016:2107",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2107.html",
               },
               {
                  name: "40616",
                  tags: [
                     "exploit",
                     "x_refsource_EXPLOIT-DB",
                     "x_transferred",
                  ],
                  url: "https://www.exploit-db.com/exploits/40616/",
               },
               {
                  name: "RHSA-2017:0372",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2017:0372",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bto.bluecoat.com/security-advisory/sa134",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05352241",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
               },
               {
                  name: "40839",
                  tags: [
                     "exploit",
                     "x_refsource_EXPLOIT-DB",
                     "x_transferred",
                  ],
                  url: "https://www.exploit-db.com/exploits/40839/",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://dirtycow.ninja",
               },
               {
                  name: "40847",
                  tags: [
                     "exploit",
                     "x_refsource_EXPLOIT-DB",
                     "x_transferred",
                  ],
                  url: "https://www.exploit-db.com/exploits/40847/",
               },
               {
                  name: "RHSA-2016:2118",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2118.html",
               },
               {
                  name: "RHSA-2016:2128",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2128.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://source.android.com/security/bulletin/2016-12-01.html",
               },
               {
                  name: "RHSA-2016:2120",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2120.html",
               },
               {
                  name: "[oss-security] 20161026 Re: CVE-2016-5195 \"Dirty COW\" Linux kernel privilege escalation vulnerability",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/10/26/7",
               },
               {
                  name: "RHSA-2016:2133",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2133.html",
               },
               {
                  name: "RHSA-2016:2098",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2098.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03761en_us",
               },
               {
                  name: "VU#243144",
                  tags: [
                     "third-party-advisory",
                     "x_refsource_CERT-VN",
                     "x_transferred",
                  ],
                  url: "https://www.kb.cert.org/vuls/id/243144",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.suse.com/show_bug.cgi?id=1004418",
               },
               {
                  name: "1037078",
                  tags: [
                     "vdb-entry",
                     "x_refsource_SECTRACK",
                     "x_transferred",
                  ],
                  url: "http://www.securitytracker.com/id/1037078",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-5195.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03722en_us",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.netapp.com/advisory/ntap-20161025-0001/",
               },
               {
                  name: "93793",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/93793",
               },
               {
                  name: "RHSA-2016:2127",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2127.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security-tracker.debian.org/tracker/CVE-2016-5195",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/dirtycow/dirtycow.github.io/wiki/PoCs",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03742en_us",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/torvalds/linux/commit/19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/dirtycow/dirtycow.github.io/wiki/VulnerabilityDetails",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://bugzilla.redhat.com/show_bug.cgi?id=1384344",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/security/vulnerabilities/2706661",
               },
               {
                  name: "RHSA-2016:2106",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2106.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619",
               },
               {
                  name: "40611",
                  tags: [
                     "exploit",
                     "x_refsource_EXPLOIT-DB",
                     "x_transferred",
                  ],
                  url: "https://www.exploit-db.com/exploits/40611/",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/security/cve/cve-2016-5195",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://source.android.com/security/bulletin/2016-11-01.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05347541",
               },
               {
                  name: "RHSA-2016:2124",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2124.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.3",
               },
               {
                  name: "RHSA-2016:2105",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2105.html",
               },
               {
                  name: "RHSA-2016:2126",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2126.html",
               },
               {
                  name: "RHSA-2016:2132",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2132.html",
               },
               {
                  name: "RHSA-2016:2110",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "http://rhn.redhat.com/errata/RHSA-2016-2110.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03707en_us",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05341463",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10176",
               },
               {
                  name: "SUSE-SU-2016:2635",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00055.html",
               },
               {
                  name: "SUSE-SU-2016:2659",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00067.html",
               },
               {
                  name: "[oss-security] 20161027 CVE-2016-5195 test case",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/10/27/13",
               },
               {
                  name: "USN-3106-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-3106-2",
               },
               {
                  name: "openSUSE-SU-2016:2583",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00034.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/139277/Kernel-Live-Patch-Security-Notice-LSN-0012-1.html",
               },
               {
                  name: "SUSE-SU-2016:2633",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00053.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161207-01-dirtycow-en",
               },
               {
                  name: "SUSE-SU-2016:2638",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00058.html",
               },
               {
                  name: "openSUSE-SU-2016:2584",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00035.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/142151/Kernel-Live-Patch-Security-Notice-LSN-0021-1.html",
               },
               {
                  name: "SUSE-SU-2016:2658",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00066.html",
               },
               {
                  name: "SUSE-SU-2016:2631",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00051.html",
               },
               {
                  name: "USN-3106-3",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-3106-3",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05352241",
               },
               {
                  name: "SUSE-SU-2016:2655",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00064.html",
               },
               {
                  name: "FEDORA-2016-c3558808cd",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W3APRVDVPDBXLH4DC5UKZVCR742MJIM3/",
               },
               {
                  name: "20170615 [security bulletin] HPESBGN03761 rev.1 - HPE Virtualization Performance Viewer (VPV)/ Cloud Optimizer using Linux, Remote Escalation of Privilege",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/archive/1/archive/1/540736/100/0/threaded",
               },
               {
                  name: "SUSE-SU-2016:2637",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00057.html",
               },
               {
                  name: "SUSE-SU-2016:2596",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00040.html",
               },
               {
                  name: "SUSE-SU-2016:2634",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00054.html",
               },
               {
                  name: "20181107 Cisco TelePresence Video Communication Server Test Validation Script Issue",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_CISCO",
                     "x_transferred",
                  ],
                  url: "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-vcsd",
               },
               {
                  name: "20161026 Vulnerability in Linux Kernel Affecting Cisco Products: October 2016",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_CISCO",
                     "x_transferred",
                  ],
                  url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-linux",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10770",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10177",
               },
               {
                  name: "SUSE-SU-2016:2657",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00065.html",
               },
               {
                  name: "SUSE-SU-2016:2614",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00045.html",
               },
               {
                  name: "USN-3105-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-3105-2",
               },
               {
                  name: "USN-3107-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-3107-1",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10774",
               },
               {
                  name: "USN-3107-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-3107-2",
               },
               {
                  name: "20170331 [security bulletin] HPESBGN03722 rev.1 - HPE Operations Agent, Local Escalation of Privilege",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/archive/1/540344/100/0/threaded",
               },
               {
                  name: "openSUSE-SU-2016:2625",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00048.html",
               },
               {
                  name: "USN-3106-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-3106-1",
               },
               {
                  name: "USN-3106-4",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-3106-4",
               },
               {
                  name: "[oss-security] 20161030 Re: CVE-2016-5195 test case",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/10/30/1",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/139923/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html",
               },
               {
                  name: "SUSE-SU-2016:2673",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00072.html",
               },
               {
                  name: "USN-3104-2",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-3104-2",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://fortiguard.com/advisory/FG-IR-16-063",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10807",
               },
               {
                  name: "SUSE-SU-2016:2629",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00049.html",
               },
               {
                  name: "20161020 [CVE-2016-5195] \"Dirty COW\" Linux privilege escalation vulnerability",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/archive/1/539611/100/0/threaded",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/139922/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html",
               },
               {
                  name: "SUSE-SU-2016:2632",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00052.html",
               },
               {
                  name: "20170310 [security bulletin] HPESBGN03707 rev.1 - HPE ConvergedSystem 700 2.0 VMware Kit, Remote Increase of Privilege",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/archive/1/archive/1/540252/100/0/threaded",
               },
               {
                  name: "USN-3105-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-3105-1",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/139286/DirtyCow-Linux-Kernel-Race-Condition.html",
               },
               {
                  name: "SUSE-SU-2016:2630",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00050.html",
               },
               {
                  name: "FEDORA-2016-db4b75b352",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E7M62SRP6CZLJ4ZXCRZKV4WPLQBSR7DT/",
               },
               {
                  name: "FEDORA-2016-c8a0c7eece",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_FEDORA",
                     "x_transferred",
                  ],
                  url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NWMDLBWMGZKFHMRJ7QUQVCERP5QHDB6W/",
               },
               {
                  name: "[oss-security] 20161103 Re: CVE-2016-5195 \"Dirty COW\" Linux kernel privilege escalation vulnerability",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/11/03/7",
               },
               {
                  name: "SUSE-SU-2016:2636",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00056.html",
               },
               {
                  name: "SUSE-SU-2016:3069",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00033.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10222",
               },
               {
                  name: "DSA-3696",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_DEBIAN",
                     "x_transferred",
                  ],
                  url: "http://www.debian.org/security/2016/dsa-3696",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "http://packetstormsecurity.com/files/139287/DirtyCow-Local-Root-Proof-Of-Concept.html",
               },
               {
                  name: "SUSE-SU-2016:2592",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00038.html",
               },
               {
                  name: "20170331 [security bulletin] HPESBGN03722 rev.1 - HPE Operations Agent, Local Escalation of Privilege",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/archive/1/archive/1/540344/100/0/threaded",
               },
               {
                  name: "20161020 [CVE-2016-5195] \"Dirty COW\" Linux privilege escalation vulnerability",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/archive/1/archive/1/539611/100/0/threaded",
               },
               {
                  name: "USN-3104-1",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_UBUNTU",
                     "x_transferred",
                  ],
                  url: "http://www.ubuntu.com/usn/USN-3104-1",
               },
               {
                  name: "20170615 [security bulletin] HPESBGN03761 rev.1 - HPE Virtualization Performance Viewer (VPV)/ Cloud Optimizer using Linux, Remote Escalation of Privilege",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/archive/1/540736/100/0/threaded",
               },
               {
                  name: "SUSE-SU-2016:2593",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00039.html",
               },
               {
                  name: "SUSE-SU-2016:3304",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00100.html",
               },
               {
                  name: "[oss-security] 20161021 CVE-2016-5195 \"Dirty COW\" Linux kernel privilege escalation vulnerability",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/10/21/1",
               },
               {
                  name: "20170310 [security bulletin] HPESBGN03707 rev.1 - HPE ConvergedSystem 700 2.0 VMware Kit, Remote Increase of Privilege",
                  tags: [
                     "mailing-list",
                     "x_refsource_BUGTRAQ",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/archive/1/540252/100/0/threaded",
               },
               {
                  name: "SUSE-SU-2016:2585",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00036.html",
               },
               {
                  name: "openSUSE-SU-2016:2649",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://security.paloaltonetworks.com/CVE-2016-5195",
               },
               {
                  name: "openSUSE-SU-2020:0554",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://www.arista.com/en/support/advisories-notices/security-advisories/1753-security-advisory-0026",
               },
               {
                  name: "[oss-security] 20220307 CVE-2022-0847: Linux kernel: overwriting read-only files",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2022/03/07/1",
               },
               {
                  name: "[oss-security] 20220808 Re: CVE-2022-2590: Linux kernel: Modifying shmem/tmpfs files without write permissions",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2022/08/08/2",
               },
               {
                  name: "[oss-security] 20220808 CVE-2022-2590: Linux kernel: Modifying shmem/tmpfs files without write permissions",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2022/08/08/1",
               },
               {
                  name: "[oss-security] 20220808 Re: CVE-2022-2590: Linux kernel: Modifying shmem/tmpfs files without write permissions",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2022/08/08/7",
               },
               {
                  name: "[oss-security] 20220808 Re: CVE-2022-2590: Linux kernel: Modifying shmem/tmpfs files without write permissions",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2022/08/08/8",
               },
               {
                  name: "[oss-security] 20220809 Re: CVE-2022-2590: Linux kernel: Modifying shmem/tmpfs files without write permissions",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2022/08/09/4",
               },
               {
                  name: "[oss-security] 20220815 Re: CVE-2022-2590: Linux kernel: Modifying shmem/tmpfs files without write permissions",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2022/08/15/1",
               },
            ],
            title: "CVE Program Container",
         },
         {
            metrics: [
               {
                  cvssV3_1: {
                     attackComplexity: "HIGH",
                     attackVector: "LOCAL",
                     availabilityImpact: "HIGH",
                     baseScore: 7,
                     baseSeverity: "HIGH",
                     confidentialityImpact: "HIGH",
                     integrityImpact: "HIGH",
                     privilegesRequired: "LOW",
                     scope: "UNCHANGED",
                     userInteraction: "NONE",
                     vectorString: "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                     version: "3.1",
                  },
               },
               {
                  other: {
                     content: {
                        id: "CVE-2016-5195",
                        options: [
                           {
                              Exploitation: "active",
                           },
                           {
                              Automatable: "no",
                           },
                           {
                              "Technical Impact": "total",
                           },
                        ],
                        role: "CISA Coordinator",
                        timestamp: "2025-01-29T17:18:38.253279Z",
                        version: "2.0.3",
                     },
                     type: "ssvc",
                  },
               },
               {
                  other: {
                     content: {
                        dateAdded: "2022-03-03",
                        reference: "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2016-5195",
                     },
                     type: "kev",
                  },
               },
            ],
            problemTypes: [
               {
                  descriptions: [
                     {
                        cweId: "CWE-362",
                        description: "CWE-362 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')",
                        lang: "en",
                        type: "CWE",
                     },
                  ],
               },
            ],
            providerMetadata: {
               dateUpdated: "2025-01-29T17:18:43.067Z",
               orgId: "134c704f-9b21-4f2e-91b3-4a467353bcc0",
               shortName: "CISA-ADP",
            },
            title: "CISA ADP Vulnrichment",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-10-20T00:00:00.000Z",
         descriptions: [
            {
               lang: "en",
               value: "Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka \"Dirty COW.\"",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2022-08-15T11:06:10.000Z",
            orgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
            shortName: "Chrome",
         },
         references: [
            {
               name: "RHSA-2016:2107",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2107.html",
            },
            {
               name: "40616",
               tags: [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
               ],
               url: "https://www.exploit-db.com/exploits/40616/",
            },
            {
               name: "RHSA-2017:0372",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2017:0372",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bto.bluecoat.com/security-advisory/sa134",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05352241",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
            },
            {
               name: "40839",
               tags: [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
               ],
               url: "https://www.exploit-db.com/exploits/40839/",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://dirtycow.ninja",
            },
            {
               name: "40847",
               tags: [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
               ],
               url: "https://www.exploit-db.com/exploits/40847/",
            },
            {
               name: "RHSA-2016:2118",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2118.html",
            },
            {
               name: "RHSA-2016:2128",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2128.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://source.android.com/security/bulletin/2016-12-01.html",
            },
            {
               name: "RHSA-2016:2120",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2120.html",
            },
            {
               name: "[oss-security] 20161026 Re: CVE-2016-5195 \"Dirty COW\" Linux kernel privilege escalation vulnerability",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/10/26/7",
            },
            {
               name: "RHSA-2016:2133",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2133.html",
            },
            {
               name: "RHSA-2016:2098",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2098.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03761en_us",
            },
            {
               name: "VU#243144",
               tags: [
                  "third-party-advisory",
                  "x_refsource_CERT-VN",
               ],
               url: "https://www.kb.cert.org/vuls/id/243144",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.suse.com/show_bug.cgi?id=1004418",
            },
            {
               name: "1037078",
               tags: [
                  "vdb-entry",
                  "x_refsource_SECTRACK",
               ],
               url: "http://www.securitytracker.com/id/1037078",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-5195.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03722en_us",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.netapp.com/advisory/ntap-20161025-0001/",
            },
            {
               name: "93793",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/93793",
            },
            {
               name: "RHSA-2016:2127",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2127.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security-tracker.debian.org/tracker/CVE-2016-5195",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/dirtycow/dirtycow.github.io/wiki/PoCs",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03742en_us",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/torvalds/linux/commit/19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/dirtycow/dirtycow.github.io/wiki/VulnerabilityDetails",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://bugzilla.redhat.com/show_bug.cgi?id=1384344",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://access.redhat.com/security/vulnerabilities/2706661",
            },
            {
               name: "RHSA-2016:2106",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2106.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619",
            },
            {
               name: "40611",
               tags: [
                  "exploit",
                  "x_refsource_EXPLOIT-DB",
               ],
               url: "https://www.exploit-db.com/exploits/40611/",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://access.redhat.com/security/cve/cve-2016-5195",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://source.android.com/security/bulletin/2016-11-01.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05347541",
            },
            {
               name: "RHSA-2016:2124",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2124.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.3",
            },
            {
               name: "RHSA-2016:2105",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2105.html",
            },
            {
               name: "RHSA-2016:2126",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2126.html",
            },
            {
               name: "RHSA-2016:2132",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2132.html",
            },
            {
               name: "RHSA-2016:2110",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "http://rhn.redhat.com/errata/RHSA-2016-2110.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03707en_us",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05341463",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10176",
            },
            {
               name: "SUSE-SU-2016:2635",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00055.html",
            },
            {
               name: "SUSE-SU-2016:2659",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00067.html",
            },
            {
               name: "[oss-security] 20161027 CVE-2016-5195 test case",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/10/27/13",
            },
            {
               name: "USN-3106-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-3106-2",
            },
            {
               name: "openSUSE-SU-2016:2583",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00034.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/139277/Kernel-Live-Patch-Security-Notice-LSN-0012-1.html",
            },
            {
               name: "SUSE-SU-2016:2633",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00053.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161207-01-dirtycow-en",
            },
            {
               name: "SUSE-SU-2016:2638",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00058.html",
            },
            {
               name: "openSUSE-SU-2016:2584",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00035.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/142151/Kernel-Live-Patch-Security-Notice-LSN-0021-1.html",
            },
            {
               name: "SUSE-SU-2016:2658",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00066.html",
            },
            {
               name: "SUSE-SU-2016:2631",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00051.html",
            },
            {
               name: "USN-3106-3",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-3106-3",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05352241",
            },
            {
               name: "SUSE-SU-2016:2655",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00064.html",
            },
            {
               name: "FEDORA-2016-c3558808cd",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/W3APRVDVPDBXLH4DC5UKZVCR742MJIM3/",
            },
            {
               name: "20170615 [security bulletin] HPESBGN03761 rev.1 - HPE Virtualization Performance Viewer (VPV)/ Cloud Optimizer using Linux, Remote Escalation of Privilege",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "http://www.securityfocus.com/archive/1/archive/1/540736/100/0/threaded",
            },
            {
               name: "SUSE-SU-2016:2637",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00057.html",
            },
            {
               name: "SUSE-SU-2016:2596",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00040.html",
            },
            {
               name: "SUSE-SU-2016:2634",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00054.html",
            },
            {
               name: "20181107 Cisco TelePresence Video Communication Server Test Validation Script Issue",
               tags: [
                  "vendor-advisory",
                  "x_refsource_CISCO",
               ],
               url: "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-vcsd",
            },
            {
               name: "20161026 Vulnerability in Linux Kernel Affecting Cisco Products: October 2016",
               tags: [
                  "vendor-advisory",
                  "x_refsource_CISCO",
               ],
               url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-linux",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10770",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10177",
            },
            {
               name: "SUSE-SU-2016:2657",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00065.html",
            },
            {
               name: "SUSE-SU-2016:2614",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00045.html",
            },
            {
               name: "USN-3105-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-3105-2",
            },
            {
               name: "USN-3107-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-3107-1",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10774",
            },
            {
               name: "USN-3107-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-3107-2",
            },
            {
               name: "20170331 [security bulletin] HPESBGN03722 rev.1 - HPE Operations Agent, Local Escalation of Privilege",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "http://www.securityfocus.com/archive/1/540344/100/0/threaded",
            },
            {
               name: "openSUSE-SU-2016:2625",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00048.html",
            },
            {
               name: "USN-3106-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-3106-1",
            },
            {
               name: "USN-3106-4",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-3106-4",
            },
            {
               name: "[oss-security] 20161030 Re: CVE-2016-5195 test case",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/10/30/1",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/139923/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html",
            },
            {
               name: "SUSE-SU-2016:2673",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00072.html",
            },
            {
               name: "USN-3104-2",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-3104-2",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://fortiguard.com/advisory/FG-IR-16-063",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10807",
            },
            {
               name: "SUSE-SU-2016:2629",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00049.html",
            },
            {
               name: "20161020 [CVE-2016-5195] \"Dirty COW\" Linux privilege escalation vulnerability",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "http://www.securityfocus.com/archive/1/539611/100/0/threaded",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/139922/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html",
            },
            {
               name: "SUSE-SU-2016:2632",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00052.html",
            },
            {
               name: "20170310 [security bulletin] HPESBGN03707 rev.1 - HPE ConvergedSystem 700 2.0 VMware Kit, Remote Increase of Privilege",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "http://www.securityfocus.com/archive/1/archive/1/540252/100/0/threaded",
            },
            {
               name: "USN-3105-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-3105-1",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/139286/DirtyCow-Linux-Kernel-Race-Condition.html",
            },
            {
               name: "SUSE-SU-2016:2630",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00050.html",
            },
            {
               name: "FEDORA-2016-db4b75b352",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/E7M62SRP6CZLJ4ZXCRZKV4WPLQBSR7DT/",
            },
            {
               name: "FEDORA-2016-c8a0c7eece",
               tags: [
                  "vendor-advisory",
                  "x_refsource_FEDORA",
               ],
               url: "https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NWMDLBWMGZKFHMRJ7QUQVCERP5QHDB6W/",
            },
            {
               name: "[oss-security] 20161103 Re: CVE-2016-5195 \"Dirty COW\" Linux kernel privilege escalation vulnerability",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/11/03/7",
            },
            {
               name: "SUSE-SU-2016:2636",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00056.html",
            },
            {
               name: "SUSE-SU-2016:3069",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00033.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10222",
            },
            {
               name: "DSA-3696",
               tags: [
                  "vendor-advisory",
                  "x_refsource_DEBIAN",
               ],
               url: "http://www.debian.org/security/2016/dsa-3696",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "http://packetstormsecurity.com/files/139287/DirtyCow-Local-Root-Proof-Of-Concept.html",
            },
            {
               name: "SUSE-SU-2016:2592",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00038.html",
            },
            {
               name: "20170331 [security bulletin] HPESBGN03722 rev.1 - HPE Operations Agent, Local Escalation of Privilege",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "http://www.securityfocus.com/archive/1/archive/1/540344/100/0/threaded",
            },
            {
               name: "20161020 [CVE-2016-5195] \"Dirty COW\" Linux privilege escalation vulnerability",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "http://www.securityfocus.com/archive/1/archive/1/539611/100/0/threaded",
            },
            {
               name: "USN-3104-1",
               tags: [
                  "vendor-advisory",
                  "x_refsource_UBUNTU",
               ],
               url: "http://www.ubuntu.com/usn/USN-3104-1",
            },
            {
               name: "20170615 [security bulletin] HPESBGN03761 rev.1 - HPE Virtualization Performance Viewer (VPV)/ Cloud Optimizer using Linux, Remote Escalation of Privilege",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "http://www.securityfocus.com/archive/1/540736/100/0/threaded",
            },
            {
               name: "SUSE-SU-2016:2593",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00039.html",
            },
            {
               name: "SUSE-SU-2016:3304",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00100.html",
            },
            {
               name: "[oss-security] 20161021 CVE-2016-5195 \"Dirty COW\" Linux kernel privilege escalation vulnerability",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/10/21/1",
            },
            {
               name: "20170310 [security bulletin] HPESBGN03707 rev.1 - HPE ConvergedSystem 700 2.0 VMware Kit, Remote Increase of Privilege",
               tags: [
                  "mailing-list",
                  "x_refsource_BUGTRAQ",
               ],
               url: "http://www.securityfocus.com/archive/1/540252/100/0/threaded",
            },
            {
               name: "SUSE-SU-2016:2585",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00036.html",
            },
            {
               name: "openSUSE-SU-2016:2649",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://security.paloaltonetworks.com/CVE-2016-5195",
            },
            {
               name: "openSUSE-SU-2020:0554",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://www.arista.com/en/support/advisories-notices/security-advisories/1753-security-advisory-0026",
            },
            {
               name: "[oss-security] 20220307 CVE-2022-0847: Linux kernel: overwriting read-only files",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2022/03/07/1",
            },
            {
               name: "[oss-security] 20220808 Re: CVE-2022-2590: Linux kernel: Modifying shmem/tmpfs files without write permissions",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2022/08/08/2",
            },
            {
               name: "[oss-security] 20220808 CVE-2022-2590: Linux kernel: Modifying shmem/tmpfs files without write permissions",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2022/08/08/1",
            },
            {
               name: "[oss-security] 20220808 Re: CVE-2022-2590: Linux kernel: Modifying shmem/tmpfs files without write permissions",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2022/08/08/7",
            },
            {
               name: "[oss-security] 20220808 Re: CVE-2022-2590: Linux kernel: Modifying shmem/tmpfs files without write permissions",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2022/08/08/8",
            },
            {
               name: "[oss-security] 20220809 Re: CVE-2022-2590: Linux kernel: Modifying shmem/tmpfs files without write permissions",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2022/08/09/4",
            },
            {
               name: "[oss-security] 20220815 Re: CVE-2022-2590: Linux kernel: Modifying shmem/tmpfs files without write permissions",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2022/08/15/1",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "chrome-cve-admin@google.com",
               ID: "CVE-2016-5195",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Race condition in mm/gup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka \"Dirty COW.\"",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "RHSA-2016:2107",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2107.html",
                  },
                  {
                     name: "40616",
                     refsource: "EXPLOIT-DB",
                     url: "https://www.exploit-db.com/exploits/40616/",
                  },
                  {
                     name: "RHSA-2017:0372",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2017:0372",
                  },
                  {
                     name: "https://bto.bluecoat.com/security-advisory/sa134",
                     refsource: "CONFIRM",
                     url: "https://bto.bluecoat.com/security-advisory/sa134",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05352241",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05352241",
                  },
                  {
                     name: "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
                     refsource: "CONFIRM",
                     url: "http://www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html",
                  },
                  {
                     name: "40839",
                     refsource: "EXPLOIT-DB",
                     url: "https://www.exploit-db.com/exploits/40839/",
                  },
                  {
                     name: "https://dirtycow.ninja",
                     refsource: "MISC",
                     url: "https://dirtycow.ninja",
                  },
                  {
                     name: "40847",
                     refsource: "EXPLOIT-DB",
                     url: "https://www.exploit-db.com/exploits/40847/",
                  },
                  {
                     name: "RHSA-2016:2118",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2118.html",
                  },
                  {
                     name: "RHSA-2016:2128",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2128.html",
                  },
                  {
                     name: "https://source.android.com/security/bulletin/2016-12-01.html",
                     refsource: "CONFIRM",
                     url: "https://source.android.com/security/bulletin/2016-12-01.html",
                  },
                  {
                     name: "RHSA-2016:2120",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2120.html",
                  },
                  {
                     name: "[oss-security] 20161026 Re: CVE-2016-5195 \"Dirty COW\" Linux kernel privilege escalation vulnerability",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/10/26/7",
                  },
                  {
                     name: "RHSA-2016:2133",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2133.html",
                  },
                  {
                     name: "RHSA-2016:2098",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2098.html",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03761en_us",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03761en_us",
                  },
                  {
                     name: "VU#243144",
                     refsource: "CERT-VN",
                     url: "https://www.kb.cert.org/vuls/id/243144",
                  },
                  {
                     name: "https://bugzilla.suse.com/show_bug.cgi?id=1004418",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.suse.com/show_bug.cgi?id=1004418",
                  },
                  {
                     name: "1037078",
                     refsource: "SECTRACK",
                     url: "http://www.securitytracker.com/id/1037078",
                  },
                  {
                     name: "https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-5195.html",
                     refsource: "CONFIRM",
                     url: "https://people.canonical.com/~ubuntu-security/cve/2016/CVE-2016-5195.html",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03722en_us",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03722en_us",
                  },
                  {
                     name: "https://security.netapp.com/advisory/ntap-20161025-0001/",
                     refsource: "CONFIRM",
                     url: "https://security.netapp.com/advisory/ntap-20161025-0001/",
                  },
                  {
                     name: "93793",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/93793",
                  },
                  {
                     name: "RHSA-2016:2127",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2127.html",
                  },
                  {
                     name: "https://security-tracker.debian.org/tracker/CVE-2016-5195",
                     refsource: "CONFIRM",
                     url: "https://security-tracker.debian.org/tracker/CVE-2016-5195",
                  },
                  {
                     name: "https://github.com/dirtycow/dirtycow.github.io/wiki/PoCs",
                     refsource: "MISC",
                     url: "https://github.com/dirtycow/dirtycow.github.io/wiki/PoCs",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03742en_us",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03742en_us",
                  },
                  {
                     name: "https://github.com/torvalds/linux/commit/19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619",
                     refsource: "CONFIRM",
                     url: "https://github.com/torvalds/linux/commit/19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619",
                  },
                  {
                     name: "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes",
                     refsource: "CONFIRM",
                     url: "https://help.ecostruxureit.com/display/public/UADCO8x/StruxureWare+Data+Center+Operation+Software+Vulnerability+Fixes",
                  },
                  {
                     name: "https://github.com/dirtycow/dirtycow.github.io/wiki/VulnerabilityDetails",
                     refsource: "MISC",
                     url: "https://github.com/dirtycow/dirtycow.github.io/wiki/VulnerabilityDetails",
                  },
                  {
                     name: "https://bugzilla.redhat.com/show_bug.cgi?id=1384344",
                     refsource: "CONFIRM",
                     url: "https://bugzilla.redhat.com/show_bug.cgi?id=1384344",
                  },
                  {
                     name: "https://access.redhat.com/security/vulnerabilities/2706661",
                     refsource: "CONFIRM",
                     url: "https://access.redhat.com/security/vulnerabilities/2706661",
                  },
                  {
                     name: "RHSA-2016:2106",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2106.html",
                  },
                  {
                     name: "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619",
                     refsource: "CONFIRM",
                     url: "http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=19be0eaffa3ac7d8eb6784ad9bdbc7d67ed8e619",
                  },
                  {
                     name: "40611",
                     refsource: "EXPLOIT-DB",
                     url: "https://www.exploit-db.com/exploits/40611/",
                  },
                  {
                     name: "https://access.redhat.com/security/cve/cve-2016-5195",
                     refsource: "CONFIRM",
                     url: "https://access.redhat.com/security/cve/cve-2016-5195",
                  },
                  {
                     name: "https://source.android.com/security/bulletin/2016-11-01.html",
                     refsource: "CONFIRM",
                     url: "https://source.android.com/security/bulletin/2016-11-01.html",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05347541",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05347541",
                  },
                  {
                     name: "RHSA-2016:2124",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2124.html",
                  },
                  {
                     name: "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.3",
                     refsource: "CONFIRM",
                     url: "http://www.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.8.3",
                  },
                  {
                     name: "RHSA-2016:2105",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2105.html",
                  },
                  {
                     name: "RHSA-2016:2126",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2126.html",
                  },
                  {
                     name: "RHSA-2016:2132",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2132.html",
                  },
                  {
                     name: "RHSA-2016:2110",
                     refsource: "REDHAT",
                     url: "http://rhn.redhat.com/errata/RHSA-2016-2110.html",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03707en_us",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-hpesbgn03707en_us",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05341463",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/portal/site/hpsc/public/kb/docDisplay?docId=emr_na-c05341463",
                  },
                  {
                     name: "https://kc.mcafee.com/corporate/index?page=content&id=SB10176",
                     refsource: "CONFIRM",
                     url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10176",
                  },
                  {
                     name: "SUSE-SU-2016:2635",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00055.html",
                  },
                  {
                     name: "SUSE-SU-2016:2659",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00067.html",
                  },
                  {
                     name: "[oss-security] 20161027 CVE-2016-5195 test case",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/10/27/13",
                  },
                  {
                     name: "USN-3106-2",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-3106-2",
                  },
                  {
                     name: "openSUSE-SU-2016:2583",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00034.html",
                  },
                  {
                     name: "http://packetstormsecurity.com/files/139277/Kernel-Live-Patch-Security-Notice-LSN-0012-1.html",
                     refsource: "MISC",
                     url: "http://packetstormsecurity.com/files/139277/Kernel-Live-Patch-Security-Notice-LSN-0012-1.html",
                  },
                  {
                     name: "SUSE-SU-2016:2633",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00053.html",
                  },
                  {
                     name: "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161207-01-dirtycow-en",
                     refsource: "CONFIRM",
                     url: "http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161207-01-dirtycow-en",
                  },
                  {
                     name: "SUSE-SU-2016:2638",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00058.html",
                  },
                  {
                     name: "openSUSE-SU-2016:2584",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00035.html",
                  },
                  {
                     name: "http://packetstormsecurity.com/files/142151/Kernel-Live-Patch-Security-Notice-LSN-0021-1.html",
                     refsource: "MISC",
                     url: "http://packetstormsecurity.com/files/142151/Kernel-Live-Patch-Security-Notice-LSN-0021-1.html",
                  },
                  {
                     name: "SUSE-SU-2016:2658",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00066.html",
                  },
                  {
                     name: "SUSE-SU-2016:2631",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00051.html",
                  },
                  {
                     name: "USN-3106-3",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-3106-3",
                  },
                  {
                     name: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05352241",
                     refsource: "CONFIRM",
                     url: "https://h20566.www2.hpe.com/hpsc/doc/public/display?docLocale=en_US&docId=emr_na-c05352241",
                  },
                  {
                     name: "SUSE-SU-2016:2655",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00064.html",
                  },
                  {
                     name: "FEDORA-2016-c3558808cd",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/W3APRVDVPDBXLH4DC5UKZVCR742MJIM3/",
                  },
                  {
                     name: "20170615 [security bulletin] HPESBGN03761 rev.1 - HPE Virtualization Performance Viewer (VPV)/ Cloud Optimizer using Linux, Remote Escalation of Privilege",
                     refsource: "BUGTRAQ",
                     url: "http://www.securityfocus.com/archive/1/archive/1/540736/100/0/threaded",
                  },
                  {
                     name: "SUSE-SU-2016:2637",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00057.html",
                  },
                  {
                     name: "SUSE-SU-2016:2596",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00040.html",
                  },
                  {
                     name: "SUSE-SU-2016:2634",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00054.html",
                  },
                  {
                     name: "20181107 Cisco TelePresence Video Communication Server Test Validation Script Issue",
                     refsource: "CISCO",
                     url: "https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20181107-vcsd",
                  },
                  {
                     name: "20161026 Vulnerability in Linux Kernel Affecting Cisco Products: October 2016",
                     refsource: "CISCO",
                     url: "http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20161026-linux",
                  },
                  {
                     name: "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10770",
                     refsource: "CONFIRM",
                     url: "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10770",
                  },
                  {
                     name: "https://kc.mcafee.com/corporate/index?page=content&id=SB10177",
                     refsource: "CONFIRM",
                     url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10177",
                  },
                  {
                     name: "SUSE-SU-2016:2657",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00065.html",
                  },
                  {
                     name: "SUSE-SU-2016:2614",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00045.html",
                  },
                  {
                     name: "USN-3105-2",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-3105-2",
                  },
                  {
                     name: "USN-3107-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-3107-1",
                  },
                  {
                     name: "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10774",
                     refsource: "CONFIRM",
                     url: "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10774",
                  },
                  {
                     name: "USN-3107-2",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-3107-2",
                  },
                  {
                     name: "20170331 [security bulletin] HPESBGN03722 rev.1 - HPE Operations Agent, Local Escalation of Privilege",
                     refsource: "BUGTRAQ",
                     url: "http://www.securityfocus.com/archive/1/540344/100/0/threaded",
                  },
                  {
                     name: "openSUSE-SU-2016:2625",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00048.html",
                  },
                  {
                     name: "USN-3106-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-3106-1",
                  },
                  {
                     name: "USN-3106-4",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-3106-4",
                  },
                  {
                     name: "[oss-security] 20161030 Re: CVE-2016-5195 test case",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/10/30/1",
                  },
                  {
                     name: "http://packetstormsecurity.com/files/139923/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html",
                     refsource: "MISC",
                     url: "http://packetstormsecurity.com/files/139923/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html",
                  },
                  {
                     name: "SUSE-SU-2016:2673",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00072.html",
                  },
                  {
                     name: "USN-3104-2",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-3104-2",
                  },
                  {
                     name: "http://fortiguard.com/advisory/FG-IR-16-063",
                     refsource: "CONFIRM",
                     url: "http://fortiguard.com/advisory/FG-IR-16-063",
                  },
                  {
                     name: "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10807",
                     refsource: "CONFIRM",
                     url: "http://kb.juniper.net/InfoCenter/index?page=content&id=JSA10807",
                  },
                  {
                     name: "SUSE-SU-2016:2629",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00049.html",
                  },
                  {
                     name: "20161020 [CVE-2016-5195] \"Dirty COW\" Linux privilege escalation vulnerability",
                     refsource: "BUGTRAQ",
                     url: "http://www.securityfocus.com/archive/1/539611/100/0/threaded",
                  },
                  {
                     name: "http://packetstormsecurity.com/files/139922/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html",
                     refsource: "MISC",
                     url: "http://packetstormsecurity.com/files/139922/Linux-Kernel-Dirty-COW-PTRACE_POKEDATA-Privilege-Escalation.html",
                  },
                  {
                     name: "SUSE-SU-2016:2632",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00052.html",
                  },
                  {
                     name: "20170310 [security bulletin] HPESBGN03707 rev.1 - HPE ConvergedSystem 700 2.0 VMware Kit, Remote Increase of Privilege",
                     refsource: "BUGTRAQ",
                     url: "http://www.securityfocus.com/archive/1/archive/1/540252/100/0/threaded",
                  },
                  {
                     name: "USN-3105-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-3105-1",
                  },
                  {
                     name: "http://packetstormsecurity.com/files/139286/DirtyCow-Linux-Kernel-Race-Condition.html",
                     refsource: "MISC",
                     url: "http://packetstormsecurity.com/files/139286/DirtyCow-Linux-Kernel-Race-Condition.html",
                  },
                  {
                     name: "SUSE-SU-2016:2630",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00050.html",
                  },
                  {
                     name: "FEDORA-2016-db4b75b352",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E7M62SRP6CZLJ4ZXCRZKV4WPLQBSR7DT/",
                  },
                  {
                     name: "FEDORA-2016-c8a0c7eece",
                     refsource: "FEDORA",
                     url: "https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NWMDLBWMGZKFHMRJ7QUQVCERP5QHDB6W/",
                  },
                  {
                     name: "[oss-security] 20161103 Re: CVE-2016-5195 \"Dirty COW\" Linux kernel privilege escalation vulnerability",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/11/03/7",
                  },
                  {
                     name: "SUSE-SU-2016:2636",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00056.html",
                  },
                  {
                     name: "SUSE-SU-2016:3069",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00033.html",
                  },
                  {
                     name: "https://kc.mcafee.com/corporate/index?page=content&id=SB10222",
                     refsource: "CONFIRM",
                     url: "https://kc.mcafee.com/corporate/index?page=content&id=SB10222",
                  },
                  {
                     name: "DSA-3696",
                     refsource: "DEBIAN",
                     url: "http://www.debian.org/security/2016/dsa-3696",
                  },
                  {
                     name: "http://packetstormsecurity.com/files/139287/DirtyCow-Local-Root-Proof-Of-Concept.html",
                     refsource: "MISC",
                     url: "http://packetstormsecurity.com/files/139287/DirtyCow-Local-Root-Proof-Of-Concept.html",
                  },
                  {
                     name: "SUSE-SU-2016:2592",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00038.html",
                  },
                  {
                     name: "20170331 [security bulletin] HPESBGN03722 rev.1 - HPE Operations Agent, Local Escalation of Privilege",
                     refsource: "BUGTRAQ",
                     url: "http://www.securityfocus.com/archive/1/archive/1/540344/100/0/threaded",
                  },
                  {
                     name: "20161020 [CVE-2016-5195] \"Dirty COW\" Linux privilege escalation vulnerability",
                     refsource: "BUGTRAQ",
                     url: "http://www.securityfocus.com/archive/1/archive/1/539611/100/0/threaded",
                  },
                  {
                     name: "USN-3104-1",
                     refsource: "UBUNTU",
                     url: "http://www.ubuntu.com/usn/USN-3104-1",
                  },
                  {
                     name: "20170615 [security bulletin] HPESBGN03761 rev.1 - HPE Virtualization Performance Viewer (VPV)/ Cloud Optimizer using Linux, Remote Escalation of Privilege",
                     refsource: "BUGTRAQ",
                     url: "http://www.securityfocus.com/archive/1/540736/100/0/threaded",
                  },
                  {
                     name: "SUSE-SU-2016:2593",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00039.html",
                  },
                  {
                     name: "SUSE-SU-2016:3304",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-12/msg00100.html",
                  },
                  {
                     name: "[oss-security] 20161021 CVE-2016-5195 \"Dirty COW\" Linux kernel privilege escalation vulnerability",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/10/21/1",
                  },
                  {
                     name: "20170310 [security bulletin] HPESBGN03707 rev.1 - HPE ConvergedSystem 700 2.0 VMware Kit, Remote Increase of Privilege",
                     refsource: "BUGTRAQ",
                     url: "http://www.securityfocus.com/archive/1/540252/100/0/threaded",
                  },
                  {
                     name: "SUSE-SU-2016:2585",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00036.html",
                  },
                  {
                     name: "openSUSE-SU-2016:2649",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2016-10/msg00063.html",
                  },
                  {
                     name: "https://security.paloaltonetworks.com/CVE-2016-5195",
                     refsource: "CONFIRM",
                     url: "https://security.paloaltonetworks.com/CVE-2016-5195",
                  },
                  {
                     name: "openSUSE-SU-2020:0554",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html",
                  },
                  {
                     name: "https://www.arista.com/en/support/advisories-notices/security-advisories/1753-security-advisory-0026",
                     refsource: "MISC",
                     url: "https://www.arista.com/en/support/advisories-notices/security-advisories/1753-security-advisory-0026",
                  },
                  {
                     name: "[oss-security] 20220307 CVE-2022-0847: Linux kernel: overwriting read-only files",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2022/03/07/1",
                  },
                  {
                     name: "[oss-security] 20220808 Re: CVE-2022-2590: Linux kernel: Modifying shmem/tmpfs files without write permissions",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2022/08/08/2",
                  },
                  {
                     name: "[oss-security] 20220808 CVE-2022-2590: Linux kernel: Modifying shmem/tmpfs files without write permissions",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2022/08/08/1",
                  },
                  {
                     name: "[oss-security] 20220808 Re: CVE-2022-2590: Linux kernel: Modifying shmem/tmpfs files without write permissions",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2022/08/08/7",
                  },
                  {
                     name: "[oss-security] 20220808 Re: CVE-2022-2590: Linux kernel: Modifying shmem/tmpfs files without write permissions",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2022/08/08/8",
                  },
                  {
                     name: "[oss-security] 20220809 Re: CVE-2022-2590: Linux kernel: Modifying shmem/tmpfs files without write permissions",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2022/08/09/4",
                  },
                  {
                     name: "[oss-security] 20220815 Re: CVE-2022-2590: Linux kernel: Modifying shmem/tmpfs files without write permissions",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2022/08/15/1",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28",
      assignerShortName: "Chrome",
      cveId: "CVE-2016-5195",
      datePublished: "2016-11-10T21:00:00.000Z",
      dateReserved: "2016-05-31T00:00:00.000Z",
      dateUpdated: "2025-01-29T17:18:43.067Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2016-8859

Vulnerability from cvelistv5

Published

2017-02-13 18:00

Modified

2024-08-06 02:35

Severity ?

Summary

Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of (1) states or (2) tags, which triggers an out-of-bounds write.

References

▼	URL	Tags
	http://www.securityfocus.com/bid/93795	vdb-entry, x_refsource_BID
	https://security.gentoo.org/glsa/201701-11	vendor-advisory, x_refsource_GENTOO
	http://www.openwall.com/lists/oss-security/2016/10/19/1	mailing-list, x_refsource_MLIST
	http://www.openwall.com/lists/oss-security/2016/10/19/10	mailing-list, x_refsource_MLIST
	http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html	vendor-advisory, x_refsource_SUSE
	https://security.gentoo.org/glsa/202007-43	vendor-advisory, x_refsource_GENTOO

Impacted products

	Vendor	Product	Version
	n/a	n/a	Version: n/a

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-06T02:35:01.250Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "93795",
                  tags: [
                     "vdb-entry",
                     "x_refsource_BID",
                     "x_transferred",
                  ],
                  url: "http://www.securityfocus.com/bid/93795",
               },
               {
                  name: "GLSA-201701-11",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/201701-11",
               },
               {
                  name: "[oss-security] 20161018 CVE Request - TRE & musl libc regex integer overflows in buffer size computations",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/10/19/1",
               },
               {
                  name: "[oss-security] 20161029 Re: CVE Request - TRE & musl libc regex integer overflows in buffer size computations",
                  tags: [
                     "mailing-list",
                     "x_refsource_MLIST",
                     "x_transferred",
                  ],
                  url: "http://www.openwall.com/lists/oss-security/2016/10/19/10",
               },
               {
                  name: "openSUSE-SU-2020:0554",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html",
               },
               {
                  name: "GLSA-202007-43",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_GENTOO",
                     "x_transferred",
                  ],
                  url: "https://security.gentoo.org/glsa/202007-43",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "n/a",
               vendor: "n/a",
               versions: [
                  {
                     status: "affected",
                     version: "n/a",
                  },
               ],
            },
         ],
         datePublic: "2016-10-18T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of (1) states or (2) tags, which triggers an out-of-bounds write.",
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "n/a",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-07-27T02:06:14",
            orgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
            shortName: "mitre",
         },
         references: [
            {
               name: "93795",
               tags: [
                  "vdb-entry",
                  "x_refsource_BID",
               ],
               url: "http://www.securityfocus.com/bid/93795",
            },
            {
               name: "GLSA-201701-11",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/201701-11",
            },
            {
               name: "[oss-security] 20161018 CVE Request - TRE & musl libc regex integer overflows in buffer size computations",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/10/19/1",
            },
            {
               name: "[oss-security] 20161029 Re: CVE Request - TRE & musl libc regex integer overflows in buffer size computations",
               tags: [
                  "mailing-list",
                  "x_refsource_MLIST",
               ],
               url: "http://www.openwall.com/lists/oss-security/2016/10/19/10",
            },
            {
               name: "openSUSE-SU-2020:0554",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html",
            },
            {
               name: "GLSA-202007-43",
               tags: [
                  "vendor-advisory",
                  "x_refsource_GENTOO",
               ],
               url: "https://security.gentoo.org/glsa/202007-43",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "cve@mitre.org",
               ID: "CVE-2016-8859",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "n/a",
                                 version: {
                                    version_data: [
                                       {
                                          version_value: "n/a",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "n/a",
                     },
                  ],
               },
            },
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "Multiple integer overflows in the TRE library and musl libc allow attackers to cause memory corruption via a large number of (1) states or (2) tags, which triggers an out-of-bounds write.",
                  },
               ],
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "n/a",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "93795",
                     refsource: "BID",
                     url: "http://www.securityfocus.com/bid/93795",
                  },
                  {
                     name: "GLSA-201701-11",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/201701-11",
                  },
                  {
                     name: "[oss-security] 20161018 CVE Request - TRE & musl libc regex integer overflows in buffer size computations",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/10/19/1",
                  },
                  {
                     name: "[oss-security] 20161029 Re: CVE Request - TRE & musl libc regex integer overflows in buffer size computations",
                     refsource: "MLIST",
                     url: "http://www.openwall.com/lists/oss-security/2016/10/19/10",
                  },
                  {
                     name: "openSUSE-SU-2020:0554",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html",
                  },
                  {
                     name: "GLSA-202007-43",
                     refsource: "GENTOO",
                     url: "https://security.gentoo.org/glsa/202007-43",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
      assignerShortName: "mitre",
      cveId: "CVE-2016-8859",
      datePublished: "2017-02-13T18:00:00",
      dateReserved: "2016-10-19T00:00:00",
      dateUpdated: "2024-08-06T02:35:01.250Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

cve-2017-1002101

Vulnerability from cvelistv5

Published

2018-03-13 17:00

Modified

2024-08-05 22:00

Severity ?

8.8 (High) - CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Summary

In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host's filesystem.

References

▼	URL	Tags
	https://access.redhat.com/errata/RHSA-2018:0475	vendor-advisory, x_refsource_REDHAT
	https://github.com/kubernetes/kubernetes/issues/60813	x_refsource_CONFIRM
	https://github.com/bgeesaman/subpath-exploit/	x_refsource_MISC
	http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html	vendor-advisory, x_refsource_SUSE

Impacted products

	Vendor	Product	Version
	Kubernetes	Kubernetes	Version: v1.3.x Version: v1.4.x Version: v1.5.x Version: v1.6.x Version: unspecified < v1.7.14 Version: unspecified < v1.8.9 Version: unspecified < v1.9.4

Show details on NVD website

JSON

To clipboard

{
   containers: {
      adp: [
         {
            providerMetadata: {
               dateUpdated: "2024-08-05T22:00:41.667Z",
               orgId: "af854a3a-2127-422b-91ae-364da2661108",
               shortName: "CVE",
            },
            references: [
               {
                  name: "RHSA-2018:0475",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_REDHAT",
                     "x_transferred",
                  ],
                  url: "https://access.redhat.com/errata/RHSA-2018:0475",
               },
               {
                  tags: [
                     "x_refsource_CONFIRM",
                     "x_transferred",
                  ],
                  url: "https://github.com/kubernetes/kubernetes/issues/60813",
               },
               {
                  tags: [
                     "x_refsource_MISC",
                     "x_transferred",
                  ],
                  url: "https://github.com/bgeesaman/subpath-exploit/",
               },
               {
                  name: "openSUSE-SU-2020:0554",
                  tags: [
                     "vendor-advisory",
                     "x_refsource_SUSE",
                     "x_transferred",
                  ],
                  url: "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html",
               },
            ],
            title: "CVE Program Container",
         },
      ],
      cna: {
         affected: [
            {
               product: "Kubernetes",
               vendor: "Kubernetes",
               versions: [
                  {
                     status: "affected",
                     version: "v1.3.x",
                  },
                  {
                     status: "affected",
                     version: "v1.4.x",
                  },
                  {
                     status: "affected",
                     version: "v1.5.x",
                  },
                  {
                     status: "affected",
                     version: "v1.6.x",
                  },
                  {
                     lessThan: "v1.7.14",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
                  {
                     lessThan: "v1.8.9",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
                  {
                     lessThan: "v1.9.4",
                     status: "affected",
                     version: "unspecified",
                     versionType: "custom",
                  },
               ],
            },
         ],
         credits: [
            {
               lang: "en",
               value: "Reported by Maxim Ivanov",
            },
         ],
         dateAssigned: "2017-12-06T00:00:00",
         datePublic: "2018-03-05T00:00:00",
         descriptions: [
            {
               lang: "en",
               value: "In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host's filesystem.",
            },
         ],
         metrics: [
            {
               cvssV3_0: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
            },
         ],
         problemTypes: [
            {
               descriptions: [
                  {
                     description: "handled symbolic links insecurely",
                     lang: "en",
                     type: "text",
                  },
               ],
            },
         ],
         providerMetadata: {
            dateUpdated: "2020-04-26T20:06:14",
            orgId: "a6081bf6-c852-4425-ad4f-a67919267565",
            shortName: "kubernetes",
         },
         references: [
            {
               name: "RHSA-2018:0475",
               tags: [
                  "vendor-advisory",
                  "x_refsource_REDHAT",
               ],
               url: "https://access.redhat.com/errata/RHSA-2018:0475",
            },
            {
               tags: [
                  "x_refsource_CONFIRM",
               ],
               url: "https://github.com/kubernetes/kubernetes/issues/60813",
            },
            {
               tags: [
                  "x_refsource_MISC",
               ],
               url: "https://github.com/bgeesaman/subpath-exploit/",
            },
            {
               name: "openSUSE-SU-2020:0554",
               tags: [
                  "vendor-advisory",
                  "x_refsource_SUSE",
               ],
               url: "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html",
            },
         ],
         x_legacyV4Record: {
            CVE_data_meta: {
               ASSIGNER: "security@kubernetes.io",
               DATE_ASSIGNED: "2017-12-06",
               ID: "CVE-2017-1002101",
               STATE: "PUBLIC",
            },
            affects: {
               vendor: {
                  vendor_data: [
                     {
                        product: {
                           product_data: [
                              {
                                 product_name: "Kubernetes",
                                 version: {
                                    version_data: [
                                       {
                                          version_affected: "=",
                                          version_value: "v1.3.x",
                                       },
                                       {
                                          version_affected: "=",
                                          version_value: "v1.4.x",
                                       },
                                       {
                                          version_affected: "=",
                                          version_value: "v1.5.x",
                                       },
                                       {
                                          version_affected: "=",
                                          version_value: "v1.6.x",
                                       },
                                       {
                                          version_affected: "<",
                                          version_value: "v1.7.14",
                                       },
                                       {
                                          version_affected: "<",
                                          version_value: "v1.8.9",
                                       },
                                       {
                                          version_affected: "<",
                                          version_value: "v1.9.4",
                                       },
                                    ],
                                 },
                              },
                           ],
                        },
                        vendor_name: "Kubernetes",
                     },
                  ],
               },
            },
            credit: [
               "Reported by Maxim Ivanov",
            ],
            data_format: "MITRE",
            data_type: "CVE",
            data_version: "4.0",
            description: {
               description_data: [
                  {
                     lang: "eng",
                     value: "In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host's filesystem.",
                  },
               ],
            },
            impact: {
               cvss: {
                  attackComplexity: "LOW",
                  attackVector: "NETWORK",
                  availabilityImpact: "HIGH",
                  baseScore: 8.8,
                  baseSeverity: "HIGH",
                  confidentialityImpact: "HIGH",
                  integrityImpact: "HIGH",
                  privilegesRequired: "LOW",
                  scope: "UNCHANGED",
                  userInteraction: "NONE",
                  vectorString: "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
                  version: "3.0",
               },
            },
            problemtype: {
               problemtype_data: [
                  {
                     description: [
                        {
                           lang: "eng",
                           value: "handled symbolic links insecurely",
                        },
                     ],
                  },
               ],
            },
            references: {
               reference_data: [
                  {
                     name: "RHSA-2018:0475",
                     refsource: "REDHAT",
                     url: "https://access.redhat.com/errata/RHSA-2018:0475",
                  },
                  {
                     name: "https://github.com/kubernetes/kubernetes/issues/60813",
                     refsource: "CONFIRM",
                     url: "https://github.com/kubernetes/kubernetes/issues/60813",
                  },
                  {
                     name: "https://github.com/bgeesaman/subpath-exploit/",
                     refsource: "MISC",
                     url: "https://github.com/bgeesaman/subpath-exploit/",
                  },
                  {
                     name: "openSUSE-SU-2020:0554",
                     refsource: "SUSE",
                     url: "http://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html",
                  },
               ],
            },
         },
      },
   },
   cveMetadata: {
      assignerOrgId: "a6081bf6-c852-4425-ad4f-a67919267565",
      assignerShortName: "kubernetes",
      cveId: "CVE-2017-1002101",
      datePublished: "2018-03-13T17:00:00",
      dateReserved: "2017-12-07T00:00:00",
      dateUpdated: "2024-08-05T22:00:41.667Z",
      state: "PUBLISHED",
   },
   dataType: "CVE_RECORD",
   dataVersion: "5.1",
}

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

Vulnerability from csaf_opensuse

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature