PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Kubernetes and HostPath, a Love-Hate Relationship

blog.quarkslab.com | research | #kubernetes | #linux | #vulnerability | #containers | #container-escape | #hostpath
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

The history of three Kubernetes vulnerabilities tied to the hostPath volume type, how they were patched, and how their exploitation exposed the underlying host filesystem.
Published
Collected

Related coverage

research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
blog · wiz.io
Leaky Vessels: runC and BuildKit container escape vulnerabilities - everything you need to know
The 'Leaky Vessels' flaws in runC (CVE-2024-21626) and BuildKit (three CVEs) enable container escapes to the host filesystem, hitting multi-tenant Kubernetes hardest; patching is urged.
blog · bishopfox.com
Zilliz / Attu | 2.6.5
Bishop Fox disclosed two flaws in Zilliz Attu 2.6.5, the Milvus management UI. An unauthenticated SSRF combined with a regex validation bypass chains into Kubernetes namespace takeover, exposing entire clusters to attackers.
vulnerability · aikido.dev
A Guide to Container Privilege Escalation Vulnerabilities
Container isolation breaks down when attackers escalate privileges, turning a low-privileged foothold into full host compromise. The guide covers CVE-2019-5736, CVE-2024-21626, and prevention.
High · vulnerability · codeberg.org
cowcups: CUPS cups-fontpath Local Privilege Escalation (LPE) to Root PoC
Demonstrates an effective local root privilege escalation chain in default CUPS environments by abusing printer discovery and Ghostscript font search paths.
research · blog.quarkslab.com
Reversing Windows Container, episode II: Silo to Server Silo
Episode two of reversing Windows containers: how the Host Compute Service converts a Silo into a Server Silo, plus kernel-side mechanisms such as syscall limiting inside Silos.
Back