Description
The Kubernetes kubectl cp command in versions 1.1-1.12, and versions prior to 1.13.11, 1.14.7, and 1.15.4 allows a combination of two symlinks provided by tar output of a malicious container to place a file outside of the destination directory specified in the kubectl cp invocation. This could be used to allow an attacker to place a nefarious file using a symlink, outside of the destination tree.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Kubernetes Kubernetes
prior to 1.13.11affectedprior to 1.14.7affectedprior to 1.15.4affected1.1affected1.2affected1.3affected1.4affected1.5affected1.6affected1.7affected1.8affected1.9affected1.10affected1.11affected1.12affected