CVE-2018-1002100
Fixed in a distro release EPSS 2%CVSS 4.2
In Kubernetes versions 1.5.x, 1.6.x, 1.7.x, 1.8.x, and prior to version 1.9.6, the kubectl cp command insecurely handles tar data returned from the container, and can be caused to overwrite arbitrary local files.
Products: Kubernetes
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | k8s.io/kubernetes | 1.9.6 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | kubernetes | 1.17.4-1 |
| Debian 13 | kubernetes | 1.17.4-1 |
| Debian 14 | kubernetes | 1.17.4-1 |
| Red Hat openshift 3.9 | atomic-openshift | 0:3.9.30-1.git.0.dec1ba7.el7 |
| Red Hat openshift 3.9 | atomic-openshift-clients | 0:3.9.30-1.git.0.dec1ba7.el7 |
| Red Hat openshift 3.9 | atomic-openshift-clients-redistributable | 0:3.9.30-1.git.0.dec1ba7.el7 |
| Red Hat openshift 3.9 | atomic-openshift-cluster-capacity | 0:3.9.30-1.git.0.dec1ba7.el7 |
| Red Hat openshift 3.9 | atomic-openshift-docker-excluder | 0:3.9.30-1.git.0.dec1ba7.el7 |
| Red Hat openshift 3.9 | atomic-openshift-dockerregistry | 0:3.9.30-1.git.349.8b7912c.el7 |
| Red Hat openshift 3.9 | atomic-openshift-excluder | 0:3.9.30-1.git.0.dec1ba7.el7 |
| Red Hat openshift 3.9 | atomic-openshift-federation-services | 0:3.9.30-1.git.0.dec1ba7.el7 |
| Red Hat openshift 3.9 | atomic-openshift-master | 0:3.9.30-1.git.0.dec1ba7.el7 |
| Red Hat openshift 3.9 | atomic-openshift-node | 0:3.9.30-1.git.0.dec1ba7.el7 |
| Red Hat openshift 3.9 | atomic-openshift-pod | 0:3.9.30-1.git.0.dec1ba7.el7 |
| Red Hat openshift 3.9 | atomic-openshift-sdn-ovs | 0:3.9.30-1.git.0.dec1ba7.el7 |
| Red Hat openshift 3.9 | atomic-openshift-service-catalog | 0:3.9.30-1.git.0.dec1ba7.el7 |
| Red Hat openshift 3.9 | atomic-openshift-template-service-broker | 0:3.9.30-1.git.0.dec1ba7.el7 |
| Red Hat openshift 3.9 | atomic-openshift-tests | 0:3.9.30-1.git.0.dec1ba7.el7 |
| Red Hat openshift 3.9 | atomic-openshift-utils | 0:3.9.30-1.git.7.46f8678.el7 |
| Red Hat openshift 3.9 | atomic-openshift-web-console | 0:3.9.30-1.git.245.4a3aade.el7 |
| Red Hat openshift 3.9 | cri-o | 0:1.9.12-1.gitfa11beb.el7 |
| Red Hat openshift 3.9 | cri-o-debuginfo | 0:1.9.12-1.gitfa11beb.el7 |
| Red Hat openshift 3.9 | cri-tools | 0:1.0.0-5.rhaos3.9.git8e6013a.el7 |
| Red Hat openshift 3.9 | cri-tools-debuginfo | 0:1.0.0-5.rhaos3.9.git8e6013a.el7 |
| Red Hat openshift 3.9 | golang-github-prometheus-node_exporter | 0:3.9.30-1.git.890.7ea5173.el7 |
| Red Hat openshift 3.9 | openshift-ansible | 0:3.9.30-1.git.7.46f8678.el7 |
| Red Hat openshift 3.9 | openshift-ansible-docs | 0:3.9.30-1.git.7.46f8678.el7 |
| Red Hat openshift 3.9 | openshift-ansible-playbooks | 0:3.9.30-1.git.7.46f8678.el7 |
| Red Hat openshift 3.9 | openshift-ansible-roles | 0:3.9.30-1.git.7.46f8678.el7 |
| Red Hat openshift 3.9 | prometheus-node-exporter | 0:3.9.30-1.git.890.7ea5173.el7 |
| Red Hat openshift 3.9 | rubygem-fluent-plugin-elasticsearch | 0:1.16.1-1.el7 |
| Red Hat openshift 3.9 | rubygem-fluent-plugin-elasticsearch-doc | 0:1.16.1-1.el7 |
| Red Hat openshift 3.9 | rubygem-fluent-plugin-kubernetes_metadata_filter | 0:1.0.3-1.el7 |
| Red Hat openshift 3.9 | rubygem-fluent-plugin-kubernetes_metadata_filter-doc | 0:1.0.3-1.el7 |
| Ubuntu 22.04 LTS | kubernetes | no fix |
| Ubuntu 24.04 LTS | kubernetes | no fix |
| Ubuntu Pro 20.04 LTS | kubernetes | no fix |
| openSUSE Tumbleweed | govulncheck-vulndb | 0.0.20250807T150727-1.1 |