Kubernetes CNI Portmap Plugin CVE-2019-9946 Remote Security Vulnerability

Bugtraq ID:	107651
Class:	Configuration Error
CVE:	CVE-2019-9946
Remote:	Yes
Local:	No
Published:	Mar 28 2019 12:00AM
Updated:	Mar 28 2019 12:00AM
Credit:	Etienne Champetier of Anevia.
Vulnerable:	Kubernetes Kubernetes 1.13.4 Kubernetes Kubernetes 1.13.3 Kubernetes Kubernetes 1.13 Kubernetes Kubernetes 1.12.6 Kubernetes Kubernetes 1.12.5 Kubernetes Kubernetes 1.12.4 Kubernetes Kubernetes 1.12.3 Kubernetes Kubernetes 1.12.2 Kubernetes Kubernetes 1.12.1 Kubernetes Kubernetes 1.12 Kubernetes Kubernetes 1.11.8 Kubernetes Kubernetes 1.11.7 Kubernetes Kubernetes 1.11.6 Kubernetes Kubernetes 1.11.5 Kubernetes Kubernetes 1.11.4 Kubernetes Kubernetes 1.11.3 Kubernetes Kubernetes 1.11.2 Kubernetes Kubernetes 1.11.1 Kubernetes Kubernetes 1.11 CNI CNI Plugin 0.7.4 CNI CNI Plugin 0.7.2 CNI CNI Plugin 0.7.1 CNI CNI Plugin 0.7
Not Vulnerable:	Kubernetes Kubernetes 1.14 Kubernetes Kubernetes 1.13.5 Kubernetes Kubernetes 1.12.7 Kubernetes Kubernetes 1.11.9 CNI CNI Plugin 0.7.5

Kubernetes CNI Portmap Plugin CVE-2019-9946 Remote Security Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Kubernetes CNI Portmap Plugin CVE-2019-9946 Remote Security Vulnerability

References:

• [ANNOUNCE] Security release of Kubernetes affecting certain network configuratio (Kubernetes)
  
• Bug 1692712 (CVE-2019-9946) - CVE-2019-9946 kubernetes: Incorrect rule injection (Red Hat Bugzilla)
  
• CVE-2019-9946 (Red Hat Bugzilla)
  
• kubernetes Home Page (Kubernetes)
  
• Kubernetes Security Issues (CVE-2019-1002101 and CVE-2019-9946) (Amazon)
  
• Portmap: append, rather than prepend, entry rules - CVE-2019-9946 (containernetworking)
  
• Portmap: append, rather than prepend, entry rules - CVE-2019-9946 (containernetworking)