CVSS 3.0
7.8 highCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HCVE-2019-11245
High (7.8) in kubernetes kubernetes. EPSS 0.6% chance of exploitation in the next 30 days. Fixed in k8s.io/kubernetes/cmd/kubelet 1.13.7, 1.14.3.
In kubelet v1.13.6 and v1.14.2, containers for pods that do not specify an explicit runAsUser attempt to run as uid 0 (root) on container restart, or if the image was previously pulled to the node. If the pod specified mustRunAsNonRoot: true, the kubelet will refuse to start the container as root. If the pod did not specify mustRunAsNonRoot: true, the kubelet will run the container as uid 0.
Severity
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 48% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-264, CWE-703
- Published
- Modified
- Record from
- the NVD, synced
Affected
- kubernetes:kubernetes
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-r76g-g87f-vw8f | Go | k8s.io/kubernetes/cmd/kubelet | >=1.14.0 <1.14.3 | 1.14.3 |
| GHSA-r76g-g87f-vw8f | Go | k8s.io/kubernetes/cmd/kubelet | >=1.13.0 <1.13.7 | 1.13.7 |
| GO-2024-2780 | Go | k8s.io/kubernetes | >=1.13.0 <1.13.7 >=1.14.0 <1.14.3 | 1.13.7, 1.14.3 |