CVE-2019-11248

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2019-11248
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-11248.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2019-11248
Downstream
Published
2019-08-29T01:15:11.367Z
Modified
2026-03-14T09:32:56.309585Z
Severity
  • 8.2 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L CVSS Calculator
Summary
[none]
Details

The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is exposed over the Kubelet's healthz port. This debugging endpoint can potentially leak sensitive information such as internal Kubelet memory addresses and configuration, or for limited denial of service. Versions prior to 1.15.0, 1.14.4, 1.13.8, and 1.12.10 are affected. The issue is of medium severity, but not exposed by the default configuration.

References

Affected packages

Git / github.com/kubernetes/kubernetes

Affected ranges

Type
GIT
Repo
https://github.com/kubernetes/kubernetes
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
e3c134023df5dea457638b614ee17ef234dc34a6
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ddf47ac13c1a9483ea035a79cd7c10005ff21a6d
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
eec55b9ba98609a46fee712359c7b5b365bdd920
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
cff46ab41ff0bb44d8584413b598ad8360ec1def
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
721bfa751924da8d1680787490c54b9179b1fed0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
c27b913fddd1a6c480c229191a087698aa92f0b1
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2166946f41b36dea2c4626f90a77706f426cdea2
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
abdda3f9fefa29172298a2e42f5102e777a8ec25
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
4683545293d792934a7a7e12f2cc47d20b2dd01b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
fe17d68da193c59675292b263341e60f97bd5ce4
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
77162bff98f7675bd24a8807a8e23b922d125230
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
641856db18352033a0d96dbc99153fa3b27298e5
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
b7394102d6ef778017f2ca4046abbaa23b88c290
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
66049e3b21efe110454d67df4fa62b08ea79a19b
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
5e53fd6bc17c0dec8434817e69b04a25d8ae0ff0
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
ce968390b180e466b8b9a8f5a30401b501e69695
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.12.10"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.13.0-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.13.1-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.13.2-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.13.3-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.13.4-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.13.5-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.13.6-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.13.7-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.13.7-beta\\.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.13.8-beta\\.0"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.14.0-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.14.1-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.14.2-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.14.3-NA"
        },
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.14.4-beta\\.0"
        }
    ]
}

Affected versions

v0.*
v0.10.0
v0.11.0
v0.12.0
v0.13.0
v0.13.1-dev
v0.14.0
v0.14.1
v0.15.0
v0.16.0
v0.16.1
v0.16.2
v0.17.0
v0.17.1
v0.18.0
v0.18.1
v0.18.2
v0.19.0
v0.19.1
v0.19.2
v0.19.3
v0.2
v0.20.0
v0.20.1
v0.20.2
v0.21.0
v0.21.1
v0.21.2
v0.3
v0.4
v0.5
v0.6.0
v0.7.0
v0.8.0
v0.9.0
v1.*
v1.0.0
v1.1.0-alpha.0
v1.1.0-alpha.1
v1.10.0-alpha.0
v1.10.0-alpha.1
v1.10.0-alpha.2
v1.10.0-alpha.3
v1.11.0-alpha.0
v1.11.0-alpha.1
v1.11.0-alpha.2
v1.12.0-alpha.0
v1.12.0-alpha.1
v1.13.0
v1.13.0-alpha.0
v1.13.0-alpha.1
v1.13.0-alpha.2
v1.13.0-alpha.3
v1.13.0-beta.0
v1.13.0-beta.1
v1.13.0-beta.2
v1.13.0-rc.1
v1.13.0-rc.2
v1.14.0
v1.14.0-alpha.0
v1.14.0-alpha.1
v1.14.0-alpha.2
v1.14.0-alpha.3
v1.14.0-beta.0
v1.14.0-beta.1
v1.14.0-beta.2
v1.14.0-rc.1
v1.15.0-alpha.0
v1.2.0-alpha.1
v1.2.0-alpha.2
v1.2.0-alpha.3
v1.2.0-alpha.4
v1.2.0-alpha.5
v1.2.0-alpha.6
v1.2.0-alpha.7
v1.2.0-alpha.8
v1.3.0-alpha.0
v1.3.0-alpha.1
v1.3.0-alpha.2
v1.3.0-alpha.3
v1.3.0-alpha.4
v1.3.0-alpha.5
v1.4.0-alpha.0
v1.4.0-alpha.1
v1.4.0-alpha.2
v1.4.0-alpha.3
v1.5.0-alpha.0
v1.5.0-alpha.1
v1.5.0-alpha.2
v1.6.0-alpha.0
v1.6.0-alpha.1
v1.6.0-alpha.2
v1.6.0-alpha.3
v1.7.0-alpha.0
v1.7.0-alpha.1
v1.7.0-alpha.2
v1.7.0-alpha.3
v1.7.0-alpha.4
v1.8.0-alpha.0
v1.8.0-alpha.1
v1.8.0-alpha.2
v1.8.0-alpha.3
v1.9.0-alpha.0
v1.9.0-alpha.1
v1.9.0-alpha.2
v1.9.0-alpha.3

Database specific

unresolved_ranges 
[
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.13.0-alpha0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.13.0-alpha1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.13.0-alpha2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.13.0-alpha3"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.13.0-beta0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.13.0-beta1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.13.0-beta2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.13.0-rc1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.13.0-rc2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.13.1-beta0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.13.2-beta0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.13.3-beta0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.13.4-beta0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.13.5-beta0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.13.6-beta0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.14.0-alpha0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.14.0-alpha1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.14.0-alpha2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.14.0-alpha3"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.14.0-beta0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.14.0-beta1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.14.0-beta2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.14.0-rc1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.14.1-beta0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.14.2-beta0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.14.3-beta0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.15.0-alpha0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.15.0-alpha1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.15.0-alpha2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.15.0-alpha3"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.15.0-beta0"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.15.0-beta1"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.15.0-beta2"
            }
        ]
    },
    {
        "events": [
            {
                "introduced": "0"
            },
            {
                "last_affected": "1.15.0-rc1"
            }
        ]
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-11248.json"