CVE-2018-1000400

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "dateAssigned": "2018-05-18T00:00:00.000Z", "datePublic": "2018-05-06T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Kubernetes CRI-O version prior to 1.9 contains a Privilege Context Switching Error (CWE-270) vulnerability in the handling of ambient capabilities that can result in containers running with elevated privileges, allowing users abilities they should not have. This attack appears to be exploitable via container execution. This vulnerability appears to have been fixed in 1.9."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-05-25T09:57:01.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://github.com/kubernetes-incubator/cri-o/pull/1558/files"}, {"name": "104262", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/104262"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "DATE_ASSIGNED": "2018-05-18T10:04:59.544719", "DATE_REQUESTED": "2018-05-18T16:33:44", "ID": "CVE-2018-1000400", "REQUESTER": "kseifried@redhat.com", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Kubernetes CRI-O version prior to 1.9 contains a Privilege Context Switching Error (CWE-270) vulnerability in the handling of ambient capabilities that can result in containers running with elevated privileges, allowing users abilities they should not have. This attack appears to be exploitable via container execution. This vulnerability appears to have been fixed in 1.9."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://github.com/kubernetes-incubator/cri-o/pull/1558/files", "refsource": "MISC", "url": "https://github.com/kubernetes-incubator/cri-o/pull/1558/files"}, {"name": "104262", "refsource": "BID", "url": "http://www.securityfocus.com/bid/104262"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T12:40:47.066Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/kubernetes-incubator/cri-o/pull/1558/files"}, {"name": "104262", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/104262"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2018-1000400", "datePublished": "2018-05-18T18:00:00.000Z", "dateReserved": "2018-05-18T00:00:00.000Z", "dateUpdated": "2024-08-05T12:40:47.066Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "cve@mitre.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:kubernetes:cri-o:*:*:*:*:*:*:*:*", "matchCriteriaId": "70802E01-CBCE-4AB9-BD19-4B2192238DFB", "versionEndExcluding": "1.9.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Kubernetes CRI-O version prior to 1.9 contains a Privilege Context Switching Error (CWE-270) vulnerability in the handling of ambient capabilities that can result in containers running with elevated privileges, allowing users abilities they should not have. This attack appears to be exploitable via container execution. This vulnerability appears to have been fixed in 1.9."}, {"lang": "es", "value": "Kubernetes CRI-O, en versiones anteriores a la 1.9, contiene una vulnerabilidad de error de switching en un contexto privilegiado (CWE-270) en la gesti\u00f3n de capacidades de ambiente que puede resultar en que los contenedores se ejecuten con privilegios elevados, lo que permite que los usuarios tengan permisos que no deber\u00edan tener. Este ataque parece ser explotable mediante la ejecuci\u00f3n de contenedores. La vulnerabilidad parece haber sido solucionada en la versi\u00f3n 1.9."}], "id": "CVE-2018-1000400", "lastModified": "2026-06-17T01:32:43.677", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-05-18T18:29:00.233", "references": [{"source": "cve@mitre.org", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/104262"}, {"source": "cve@mitre.org", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/kubernetes-incubator/cri-o/pull/1558/files"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "http://www.securityfocus.com/bid/104262"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Patch", "Third Party Advisory"], "url": "https://github.com/kubernetes-incubator/cri-o/pull/1558/files"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-269"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{"acknowledgement": "This issue was discovered by OpenShift team (Red Hat).", "affected_release": [{"advisory": "RHBA-2018:1796", "cpe": "cpe:/a:redhat:openshift:3.9::el7", "package": "atomic-openshift-0:3.9.30-1.git.0.dec1ba7.el7", "product_name": "Red Hat OpenShift Container Platform 3.9", "release_date": "2018-06-06T00:00:00Z"}, {"advisory": "RHBA-2018:1796", "cpe": "cpe:/a:redhat:openshift:3.9::el7", "package": "atomic-openshift-dockerregistry-0:3.9.30-1.git.349.8b7912c.el7", "product_name": "Red Hat OpenShift Container Platform 3.9", "release_date": "2018-06-06T00:00:00Z"}, {"advisory": "RHBA-2018:1796", "cpe": "cpe:/a:redhat:openshift:3.9::el7", "package": "atomic-openshift-web-console-0:3.9.30-1.git.245.4a3aade.el7", "product_name": "Red Hat OpenShift Container Platform 3.9", "release_date": "2018-06-06T00:00:00Z"}, {"advisory": "RHBA-2018:1796", "cpe": "cpe:/a:redhat:openshift:3.9::el7", "package": "cri-o-0:1.9.12-1.gitfa11beb.el7", "product_name": "Red Hat OpenShift Container Platform 3.9", "release_date": "2018-06-06T00:00:00Z"}, {"advisory": "RHBA-2018:1796", "cpe": "cpe:/a:redhat:openshift:3.9::el7", "package": "cri-tools-0:1.0.0-5.rhaos3.9.git8e6013a.el7", "product_name": "Red Hat OpenShift Container Platform 3.9", "release_date": "2018-06-06T00:00:00Z"}, {"advisory": "RHBA-2018:1796", "cpe": "cpe:/a:redhat:openshift:3.9::el7", "package": "golang-github-prometheus-node_exporter-0:3.9.30-1.git.890.7ea5173.el7", "product_name": "Red Hat OpenShift Container Platform 3.9", "release_date": "2018-06-06T00:00:00Z"}, {"advisory": "RHBA-2018:1796", "cpe": "cpe:/a:redhat:openshift:3.9::el7", "package": "openshift-ansible-0:3.9.30-1.git.7.46f8678.el7", "product_name": "Red Hat OpenShift Container Platform 3.9", "release_date": "2018-06-06T00:00:00Z"}, {"advisory": "RHBA-2018:1796", "cpe": "cpe:/a:redhat:openshift:3.9::el7", "package": "rubygem-fluent-plugin-elasticsearch-0:1.16.1-1.el7", "product_name": "Red Hat OpenShift Container Platform 3.9", "release_date": "2018-06-06T00:00:00Z"}, {"advisory": "RHBA-2018:1796", "cpe": "cpe:/a:redhat:openshift:3.9::el7", "package": "rubygem-fluent-plugin-kubernetes_metadata_filter-0:1.0.3-1.el7", "product_name": "Red Hat OpenShift Container Platform 3.9", "release_date": "2018-06-06T00:00:00Z"}], "bugzilla": {"description": "cri-o: capabilities are not dropped when switching to a non-root user", "id": "1578109", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=1578109"}, "csaw": false, "cvss3": {"cvss3_base_score": "4.3", "cvss3_scoring_vector": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "status": "verified"}, "cwe": "CWE-270", "details": ["Kubernetes CRI-O version prior to 1.9 contains a Privilege Context Switching Error (CWE-270) vulnerability in the handling of ambient capabilities that can result in containers running with elevated privileges, allowing users abilities they should not have. This attack appears to be exploitable via container execution. This vulnerability appears to have been fixed in 1.9."], "name": "CVE-2018-1000400", "package_state": [{"cpe": "cpe:/a:redhat:openshift:3.10", "fix_state": "Not affected", "package_name": "cri-o", "product_name": "Red Hat OpenShift Container Platform 3.10"}, {"cpe": "cpe:/a:redhat:openshift:3.11", "fix_state": "Not affected", "package_name": "cri-o", "product_name": "Red Hat OpenShift Container Platform 3.11"}, {"cpe": "cpe:/a:redhat:openshift:4", "fix_state": "Not affected", "package_name": "cri-o", "product_name": "Red Hat OpenShift Container Platform 4"}], "public_date": "2018-04-27T00:00:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2018-1000400\nhttps://nvd.nist.gov/vuln/detail/CVE-2018-1000400"], "threat_severity": "Moderate"}

{}