VDB
AWS-2018-020
AWS-2018-020
PUBLISHED
December 5, 2018 12:00 PM PST AWS is aware of a recent security issue within Kubernetes, assigned CVE identifier CVE-2018-1002105 . Amazon Elastic Container Service for Kubernetes (EKS) manages the Kubernetes control plane on behalf of customers. We have completed patching of the Amazon EKS fleet. All Amazon EKS Kubernetes clusters are now running a version of Kubernetes that is not affected by this issue. No customer action is required to receive these updates.
Exploit Intelligence
- Test utility for cve-2018-1002105 (github-poc-repo)
- PoC for CVE-2018-1002105. (github-poc-repo)
- 个人整理的Centos7.x + Kubernetes-1.12.3 + Dashboard-1.8.3 无 CVE-2018-1002105 漏洞的master节点全自动快速一键安装部署文件，适用于测试环境，生产环境的快速安装部署 (github-poc-repo)
- PoC command injection example for cve-2018-1002105 based off https://github.com/gravitational/cve-2018-1002105 (github-poc-repo)
- sh-ubh/CVE-2018-1002105 (github-poc-repo)
- sh-ubh/CVE-2018-1002105 (github-poc)
- PoC command injection example for cve-2018-1002105 based off https://github.com/gravitational/cve-2018-1002105 (github-poc)
- 个人整理的Centos7.x + Kubernetes-1.12.3 + Dashboard-1.8.3 无 CVE-2018-1002105 漏洞的master节点全自动快速一键安装部署文件，适用于测试环境，生产环境的快速安装部署 (github-poc)
- PoC for CVE-2018-1002105. (github-poc)
- Test utility for cve-2018-1002105 (github-poc)
…and 6 more exploits
Timeline
- Dec 5, 2018 CVE Published