CVE-2018-1002100

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

In Kubernetes versions 1.5.x, 1.6.x, 1.7.x, 1.8.x, and prior to version 1.9.6, the kubectl cp command insecurely handles tar data returned from the container, and can be caused to overwrite arbitrary local files.

Metrics

CVSS 3.0 5.5/10CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
Kubernetes	Kubernetes	v1.5.x; v1.6.x; v1.7.x; v1.8.x; >= unspecified, < v1.9.6

References

https://bugzilla.redhat.com/show_bug.cgi?id=1564305Issue Tracking, Third Party Advisory
https://github.com/kubernetes/kubernetes/issues/61297Third Party Advisory
https://hansmi.ch/articles/2018-04-openshift-s2i-securityThird Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1564305Issue Tracking, Third Party Advisory
https://github.com/kubernetes/kubernetes/issues/61297Third Party Advisory
https://hansmi.ch/articles/2018-04-openshift-s2i-securityThird Party Advisory

Timeline

Published: Jun 2, 2018
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2018

CVE-2018-10021019.8In Kubernetes versions 1.9.0-1.9.9, 1.10.0-1.10.5, and 1.11.0-1.11.1, user input was handled insecurely while setting up volume mounts on Wi CVE-2018-10021022.6Improper validation of URL redirection in the Kubernetes API server in versions prior to v1.14.0 allows an attacker-controlled Kubelet to re CVE-2018-10021038.8In Minikube versions 0.3.0-0.29.0, minikube exposes the Kubernetes Dashboard listening on the VM IP at port 30000. In VM environments where CVE-2018-10021045.3Versions < 1.5 of the Kubernetes ingress default backend, which handles invalid ingress traffic, exposed prometheus metrics publicly.CVE-2018-10021059.8In all Kubernetes versions prior to v1.10.11, v1.11.5, and v1.12.3, incorrect handling of error responses to proxied upgrade requests in the CVE-2018-10021509.1Koji version 1.12, 1.13, 1.14 and 1.15 contain an incorrect access control vulnerability resulting in arbitrary filesystem read/write access CVE-2018-10022005.5plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) CVE-2018-10022015.5zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip a CVE-2018-10022026.5zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip a CVE-2018-10022035.5unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot s CVE-2018-10022045.5adm-zip npm library before 0.4.9 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot sla CVE-2018-10022055.5DotNetZip.Semvered before 1.11.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot sla