Detections
Analytics

SCA: security update for k8s.io/kubernetes (GHSA-34jx-wx69-9x8v)

medium Tenable Cloud Security Plugin ID 409279

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - The kubectl cp command allows copying files between containers and the user machine. To copy files from a
 container, Kubernetes creates a tar inside the container, copies it over the network, and kubectl unpacks
 it on the user’s machine. If the tar binary in the container is malicious, it could run any code and
 output unexpected, malicious results. An attacker could use this to write files to any path on the user’s
 machine when kubectl cp is called, limited only by the system permissions of the local user. The untar
 function can both create and follow symbolic links. The issue is resolved in kubectl v1.11.9, v1.12.7,
 v1.13.5, and v1.14.0. (CVE-2019-1002101)

See Also

https://github.com/advisories/GHSA-34jx-wx69-9x8v

Plugin Details

Severity: Medium

ID: 409279

Version: Revision 1.5

Type: Local

Family: SCA Checks

Published: 1/23/2025

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Low

Score: 3

Percentile: 23.18

Vendor

Vendor Severity: Medium

CVSS v2

Risk Factor: Medium

Base Score: 5.8

Temporal Score: 4.5

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:P/A:P

CVSS Score Source: CVE-2019-1002101

CVSS v3

Risk Factor: Medium

Base Score: 5.5

Temporal Score: 5

Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C

Vulnerability Information

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 2/15/2022

Vulnerability Publication Date: 3/28/2019

Reference Information

CVE: CVE-2019-1002101

BID: 107652

cwe: CWE-59