CVE-2017-1002101 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2017-1002101 Interim 1 32 2023-10-12T14:16:29Z current 2021-05-30T14:06:31Z 2023-10-12T14:16:29Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2017-1002101 In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host's filesystem. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2018-March/003825.html E-Mail link for SUSE-SU-2018:0748-1 https://lists.opensuse.org/opensuse-security-announce/2020-04/msg00041.html E-Mail link for openSUSE-SU-2020:0554-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Magnum Orchestration 7 SUSE CaaS Platform 3.0 SUSE CaaS Platform 4.0 SUSE Container as a Service Platform 2.0 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Containers 15 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Micro 5.3 SUSE Linux Enterprise Micro 5.4 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Containers 15 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Containers 12 SUSE Linux Enterprise Module for Containers 15 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP5 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE Linux Enterprise Module for Containers 15 SP1 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 6-LTSS openSUSE Leap 15.1 openSUSE Tumbleweed cri-o-1.17.1-lp151.2.2 cri-o-kubeadm-criconfig-1.17.1-lp151.2.2 cri-tools-1.18.0-lp151.2.1 docker docker-bash-completion docker-kubic docker-rootless-extras go1.14-1.14-lp151.6.1 go1.14-doc-1.14-lp151.6.1 go1.14-race-1.14-lp151.6.1 kubernetes kubernetes-apiserver-1.18.0-lp151.5.1 kubernetes-apiserver-1.22.2-21.2 kubernetes-apiserver-minus1-1.21.5-21.2 kubernetes-client kubernetes-client-1.18.0-lp151.5.1 kubernetes-client-1.22.2-21.2 kubernetes-common kubernetes-controller-manager-1.18.0-lp151.5.1 kubernetes-controller-manager-1.22.2-21.2 kubernetes-controller-manager-minus1-1.21.5-21.2 kubernetes-coredns-1.8.4-21.2 kubernetes-coredns-minus1-1.8.0-21.2 kubernetes-etcd-3.5.0-21.2 kubernetes-etcd-minus1-3.4.13-21.2 kubernetes-kubeadm kubernetes-kubeadm-1.18.0-lp151.5.1 kubernetes-kubeadm-1.22.2-21.2 kubernetes-kubelet kubernetes-kubelet-1.22.2-21.2 kubernetes-kubelet-common-1.18.0-lp151.5.1 kubernetes-kubelet1.17-1.18.0-lp151.5.1 kubernetes-kubelet1.18-1.18.0-lp151.5.1 kubernetes-master kubernetes-master-1.18.0-lp151.5.1 kubernetes-node kubernetes-node-1.18.0-lp151.5.1 kubernetes-proxy-1.18.0-lp151.5.1 kubernetes-proxy-1.22.2-21.2 kubernetes-proxy-minus1-1.21.5-21.2 kubernetes-scheduler-1.18.0-lp151.5.1 kubernetes-scheduler-1.22.2-21.2 kubernetes-scheduler-minus1-1.21.5-21.2 cri-o-1.17.1-lp151.2.2 as a component of openSUSE Leap 15.1 cri-o-kubeadm-criconfig-1.17.1-lp151.2.2 as a component of openSUSE Leap 15.1 cri-tools-1.18.0-lp151.2.1 as a component of openSUSE Leap 15.1 go1.14-1.14-lp151.6.1 as a component of openSUSE Leap 15.1 go1.14-doc-1.14-lp151.6.1 as a component of openSUSE Leap 15.1 go1.14-race-1.14-lp151.6.1 as a component of openSUSE Leap 15.1 kubernetes-apiserver-1.18.0-lp151.5.1 as a component of openSUSE Leap 15.1 kubernetes-client-1.18.0-lp151.5.1 as a component of openSUSE Leap 15.1 kubernetes-controller-manager-1.18.0-lp151.5.1 as a component of openSUSE Leap 15.1 kubernetes-kubeadm-1.18.0-lp151.5.1 as a component of openSUSE Leap 15.1 kubernetes-kubelet-common-1.18.0-lp151.5.1 as a component of openSUSE Leap 15.1 kubernetes-kubelet1.17-1.18.0-lp151.5.1 as a component of openSUSE Leap 15.1 kubernetes-kubelet1.18-1.18.0-lp151.5.1 as a component of openSUSE Leap 15.1 kubernetes-master-1.18.0-lp151.5.1 as a component of openSUSE Leap 15.1 kubernetes-node-1.18.0-lp151.5.1 as a component of openSUSE Leap 15.1 kubernetes-proxy-1.18.0-lp151.5.1 as a component of openSUSE Leap 15.1 kubernetes-scheduler-1.18.0-lp151.5.1 as a component of openSUSE Leap 15.1 kubernetes-apiserver-1.22.2-21.2 as a component of openSUSE Tumbleweed kubernetes-apiserver-minus1-1.21.5-21.2 as a component of openSUSE Tumbleweed kubernetes-client-1.22.2-21.2 as a component of openSUSE Tumbleweed kubernetes-controller-manager-1.22.2-21.2 as a component of openSUSE Tumbleweed kubernetes-controller-manager-minus1-1.21.5-21.2 as a component of openSUSE Tumbleweed kubernetes-coredns-1.8.4-21.2 as a component of openSUSE Tumbleweed kubernetes-coredns-minus1-1.8.0-21.2 as a component of openSUSE Tumbleweed kubernetes-etcd-3.5.0-21.2 as a component of openSUSE Tumbleweed kubernetes-etcd-minus1-3.4.13-21.2 as a component of openSUSE Tumbleweed kubernetes-kubeadm-1.22.2-21.2 as a component of openSUSE Tumbleweed kubernetes-kubelet-1.22.2-21.2 as a component of openSUSE Tumbleweed kubernetes-proxy-1.22.2-21.2 as a component of openSUSE Tumbleweed kubernetes-proxy-minus1-1.21.5-21.2 as a component of openSUSE Tumbleweed kubernetes-scheduler-1.22.2-21.2 as a component of openSUSE Tumbleweed kubernetes-scheduler-minus1-1.21.5-21.2 as a component of openSUSE Tumbleweed docker as a component of Magnum Orchestration 7 docker-kubic as a component of SUSE CaaS Platform 3.0 docker as a component of SUSE CaaS Platform 3.0 kubernetes-client as a component of SUSE CaaS Platform 3.0 kubernetes-common as a component of SUSE CaaS Platform 3.0 kubernetes-kubelet as a component of SUSE CaaS Platform 3.0 kubernetes-master as a component of SUSE CaaS Platform 3.0 kubernetes-node as a component of SUSE CaaS Platform 3.0 kubernetes as a component of SUSE CaaS Platform 3.0 kubernetes-client as a component of SUSE CaaS Platform 4.0 kubernetes-common as a component of SUSE CaaS Platform 4.0 kubernetes-kubeadm as a component of SUSE CaaS Platform 4.0 kubernetes-kubelet as a component of SUSE CaaS Platform 4.0 kubernetes as a component of SUSE CaaS Platform 4.0 docker as a component of SUSE Container as a Service Platform 2.0 docker as a component of SUSE Linux Enterprise Micro 5.3 docker as a component of SUSE Linux Enterprise Micro 5.4 docker as a component of SUSE Linux Enterprise Module for Containers 12 docker as a component of SUSE Linux Enterprise Module for Containers 15 docker-bash-completion as a component of SUSE Linux Enterprise Module for Containers 15 docker as a component of SUSE Linux Enterprise Module for Containers 15 SP1 docker-bash-completion as a component of SUSE Linux Enterprise Module for Containers 15 SP1 docker as a component of SUSE Linux Enterprise Module for Containers 15 SP5 docker-bash-completion as a component of SUSE Linux Enterprise Module for Containers 15 SP5 docker-rootless-extras as a component of SUSE Linux Enterprise Module for Containers 15 SP5 docker as a component of SUSE OpenStack Cloud 6 docker as a component of SUSE OpenStack Cloud 6-LTSS In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using subpath volume mounts with any volume type (including non-privileged pods, subject to file permissions) can access files/directories outside of the volume, including the host's filesystem. CVE-2017-1002101 openSUSE Leap 15.1:cri-o-1.17.1-lp151.2.2 openSUSE Leap 15.1:cri-o-kubeadm-criconfig-1.17.1-lp151.2.2 openSUSE Leap 15.1:cri-tools-1.18.0-lp151.2.1 openSUSE Leap 15.1:go1.14-1.14-lp151.6.1 openSUSE Leap 15.1:go1.14-doc-1.14-lp151.6.1 openSUSE Leap 15.1:go1.14-race-1.14-lp151.6.1 openSUSE Leap 15.1:kubernetes-apiserver-1.18.0-lp151.5.1 openSUSE Leap 15.1:kubernetes-client-1.18.0-lp151.5.1 openSUSE Leap 15.1:kubernetes-controller-manager-1.18.0-lp151.5.1 openSUSE Leap 15.1:kubernetes-kubeadm-1.18.0-lp151.5.1 openSUSE Leap 15.1:kubernetes-kubelet-common-1.18.0-lp151.5.1 openSUSE Leap 15.1:kubernetes-kubelet1.17-1.18.0-lp151.5.1 openSUSE Leap 15.1:kubernetes-kubelet1.18-1.18.0-lp151.5.1 openSUSE Leap 15.1:kubernetes-master-1.18.0-lp151.5.1 openSUSE Leap 15.1:kubernetes-node-1.18.0-lp151.5.1 openSUSE Leap 15.1:kubernetes-proxy-1.18.0-lp151.5.1 openSUSE Leap 15.1:kubernetes-scheduler-1.18.0-lp151.5.1 openSUSE Tumbleweed:kubernetes-apiserver-1.22.2-21.2 openSUSE Tumbleweed:kubernetes-apiserver-minus1-1.21.5-21.2 openSUSE Tumbleweed:kubernetes-client-1.22.2-21.2 openSUSE Tumbleweed:kubernetes-controller-manager-1.22.2-21.2 openSUSE Tumbleweed:kubernetes-controller-manager-minus1-1.21.5-21.2 openSUSE Tumbleweed:kubernetes-coredns-1.8.4-21.2 openSUSE Tumbleweed:kubernetes-coredns-minus1-1.8.0-21.2 openSUSE Tumbleweed:kubernetes-etcd-3.5.0-21.2 openSUSE Tumbleweed:kubernetes-etcd-minus1-3.4.13-21.2 openSUSE Tumbleweed:kubernetes-kubeadm-1.22.2-21.2 openSUSE Tumbleweed:kubernetes-kubelet-1.22.2-21.2 openSUSE Tumbleweed:kubernetes-proxy-1.22.2-21.2 openSUSE Tumbleweed:kubernetes-proxy-minus1-1.21.5-21.2 openSUSE Tumbleweed:kubernetes-scheduler-1.22.2-21.2 openSUSE Tumbleweed:kubernetes-scheduler-minus1-1.21.5-21.2 Magnum Orchestration 7:docker SUSE CaaS Platform 3.0:docker SUSE CaaS Platform 3.0:docker-kubic SUSE CaaS Platform 3.0:kubernetes SUSE CaaS Platform 3.0:kubernetes-client SUSE CaaS Platform 3.0:kubernetes-common SUSE CaaS Platform 3.0:kubernetes-kubelet SUSE CaaS Platform 3.0:kubernetes-master SUSE CaaS Platform 3.0:kubernetes-node SUSE CaaS Platform 4.0:kubernetes SUSE CaaS Platform 4.0:kubernetes-client SUSE CaaS Platform 4.0:kubernetes-common SUSE CaaS Platform 4.0:kubernetes-kubeadm SUSE CaaS Platform 4.0:kubernetes-kubelet SUSE Container as a Service Platform 2.0:docker SUSE Linux Enterprise Micro 5.3:docker SUSE Linux Enterprise Micro 5.4:docker SUSE Linux Enterprise Module for Containers 12:docker SUSE Linux Enterprise Module for Containers 15 SP1:docker SUSE Linux Enterprise Module for Containers 15 SP1:docker-bash-completion SUSE Linux Enterprise Module for Containers 15 SP5:docker SUSE Linux Enterprise Module for Containers 15 SP5:docker-bash-completion SUSE Linux Enterprise Module for Containers 15 SP5:docker-rootless-extras SUSE Linux Enterprise Module for Containers 15:docker SUSE Linux Enterprise Module for Containers 15:docker-bash-completion SUSE OpenStack Cloud 6-LTSS:docker SUSE OpenStack Cloud 6:docker important 5.5 AV:N/AC:L/Au:S/C:P/I:P/A:N 7.4 CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H