A flaw was found in source-to-image function as shipped with Openshift Enterprise 3.x. An improper path validation of tar files in ExtractTarStreamFromTarReader in tar/tar.go leads to privilege escalation.
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://access.redhat.com/errata/RHSA-2018:1235 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2018:1241 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2018:1233 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2019:0036 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2018:1237 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2018:1227 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2018:1243 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2018:1231 | vendor-advisory x_refsource_REDHAT |
| https://bugzilla.redhat.com/show_bug.cgi?id=1562246 | x_refsource_CONFIRM |
| https://access.redhat.com/errata/RHSA-2018:1229 | vendor-advisory x_refsource_REDHAT |
| https://access.redhat.com/errata/RHSA-2018:1239 | vendor-advisory x_refsource_REDHAT |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|