CVE-2019-11248

Kubernetes kubelet exposes /debug/pprof info on healthz port

Severity Score

8.2

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is exposed over the Kubelet's healthz port. This debugging endpoint can potentially leak sensitive information such as internal Kubelet memory addresses and configuration, or for limited denial of service. Versions prior to 1.15.0, 1.14.4, 1.13.8, and 1.12.10 are affected. The issue is of medium severity, but not exposed by the default configuration.

El extremo de depuración /debug/pprof se expone a través del puerto de salud de Kubelet no autenticado. El punto final del pprof go se expone sobre el puerto healthz del Kubelet. Este extremo de depuración puede filtrar información confidencial, como las direcciones internas de memoria y la configuración de Kubelet, o por una denegación de servicio limitada. Las versiones anteriores a 1.15.0, 1.14.4, 1.13.8 y 1.12.10 se ven afectadas. El problema es de gravedad media, pero no expuesto por la configuración predeterminada.

*Credits: Jordan Zebor, F5 Networks

CVSS Scores

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

None

Availability

Low

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

Low

Attack Vector

Network

Attack Complexity

Low

Authentication

None

Confidentiality

Partial

Integrity

None

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2019-04-17 CVE Reserved
2019-08-29 CVE Published
2024-09-17 CVE Updated
2025-01-09 First Exploit
2025-03-30 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-419: Unprotected Primary Channel
CWE-862: Missing Authorization

CAPEC

References (4)

URL	Tag	Source
https://groups.google.com/d/msg/kubernetes-security-announce/pKELclHIov8/BEDtRELACQAJ	Mailing List
https://security.netapp.com/advisory/ntap-20190919-0003	Third Party Advisory

URL	Date	SRC
https://github.com/bash3rt3am/poc-cve	2025-01-09

URL	Date	SRC
https://github.com/kubernetes/kubernetes/issues/81023	2020-10-05

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				< 1.12.10 Search vendor "Kubernetes" for product "Kubernetes" and version " < 1.12.10"		-		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.0"		-		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.0"		alpha0		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.0"		alpha1		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.0"		alpha2		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.0"		alpha3		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.0"		beta0		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.0"		beta1		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.0"		beta2		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.0"		rc1		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.0"		rc2		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.1 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.1"		-		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.1 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.1"		beta0		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.2 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.2"		-		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.2 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.2"		beta0		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.3 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.3"		-		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.3 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.3"		beta0		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.4 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.4"		-		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.4 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.4"		beta0		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.5 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.5"		-		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.5 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.5"		beta0		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.6 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.6"		-		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.6 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.6"		beta0		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.7 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.7"		-		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.7 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.7"		beta.0		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.13.8 Search vendor "Kubernetes" for product "Kubernetes" and version "1.13.8"		beta.0		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.14.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.14.0"		-		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.14.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.14.0"		alpha0		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.14.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.14.0"		alpha1		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.14.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.14.0"		alpha2		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.14.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.14.0"		alpha3		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.14.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.14.0"		beta0		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.14.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.14.0"		beta1		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.14.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.14.0"		beta2		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.14.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.14.0"		rc1		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.14.1 Search vendor "Kubernetes" for product "Kubernetes" and version "1.14.1"		-		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.14.1 Search vendor "Kubernetes" for product "Kubernetes" and version "1.14.1"		beta0		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.14.2 Search vendor "Kubernetes" for product "Kubernetes" and version "1.14.2"		-		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.14.2 Search vendor "Kubernetes" for product "Kubernetes" and version "1.14.2"		beta0		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.14.3 Search vendor "Kubernetes" for product "Kubernetes" and version "1.14.3"		-		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.14.3 Search vendor "Kubernetes" for product "Kubernetes" and version "1.14.3"		beta0		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.14.4 Search vendor "Kubernetes" for product "Kubernetes" and version "1.14.4"		beta.0		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.15.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.15.0"		alpha0		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.15.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.15.0"		alpha1		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.15.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.15.0"		alpha2		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.15.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.15.0"		alpha3		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.15.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.15.0"		beta0		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.15.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.15.0"		beta1		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.15.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.15.0"		beta2		Affected
Kubernetes Search vendor "Kubernetes"		Kubernetes Search vendor "Kubernetes" for product "Kubernetes"				1.15.0 Search vendor "Kubernetes" for product "Kubernetes" and version "1.15.0"		rc1		Affected