{"schema_version":"1.9.0","id":"GHSA-mm7g-f2gg-cw8g","published":"2022-05-13T01:38:23Z","modified":"2024-08-20T20:58:40.938651Z","aliases":["CVE-2017-1002102","GO-2023-1977"],"summary":"Kubernetes arbitrary file overwrite","details":"In Kubernetes versions 1.3.x, 1.4.x, 1.5.x, 1.6.x and prior to versions 1.7.14, 1.8.9 and 1.9.4 containers using a secret, configMap, projected or downwardAPI volume can trigger deletion of arbitrary files/directories from the nodes where they are running.","affected":[{"package":{"name":"k8s.io/kubernetes","ecosystem":"Go","purl":"pkg:golang/k8s.io/kubernetes"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.3.0"},{"fixed":"1.7.14"}]}],"database_specific":{"last_known_affected_version_range":"<= 1.7.13","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-mm7g-f2gg-cw8g/GHSA-mm7g-f2gg-cw8g.json"}},{"package":{"name":"k8s.io/kubernetes","ecosystem":"Go","purl":"pkg:golang/k8s.io/kubernetes"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.8.0"},{"fixed":"1.8.9"}]}],"database_specific":{"last_known_affected_version_range":"<= 1.8.8","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-mm7g-f2gg-cw8g/GHSA-mm7g-f2gg-cw8g.json"}},{"package":{"name":"k8s.io/kubernetes","ecosystem":"Go","purl":"pkg:golang/k8s.io/kubernetes"},"ranges":[{"type":"SEMVER","events":[{"introduced":"1.9.0"},{"fixed":"1.9.4"}]}],"database_specific":{"last_known_affected_version_range":"<= 1.9.3","source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-mm7g-f2gg-cw8g/GHSA-mm7g-f2gg-cw8g.json"}}],"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2017-1002102"},{"type":"WEB","url":"https://github.com/kubernetes/kubernetes/issues/60814"},{"type":"WEB","url":"https://access.redhat.com/errata/RHSA-2018:0475"},{"type":"PACKAGE","url":"https://github.com/kubernetes/kubernetes"}],"database_specific":{"cwe_ids":["CWE-284"],"github_reviewed":true,"github_reviewed_at":"2023-07-26T19:47:20Z","nvd_published_at":"2018-03-13T17:29:00Z","severity":"MODERATE"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N"}]}