StackRadar

CVE-2019-11245

Unscored

Advisory

Published 10 Jun 2024In the index since 6 Sept 2026
Severity
Unscored
worst across findings
CVSS
base score, highest
EPSS
0.006
47th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
10
of 17,781 indexed, latest versions
Container images
9
deployed by those charts
Fix available
1 of 1
affected package

Kubelet Incorrect Privilege Assignment in k8s.io/kubernetes

Carried by container images the latest versions of 10 of 17,781 indexed charts deploy, on 9 images.

Affected packageAffected versionsFixed inImages
k8s.io/kubernetesgolangv1.13.0, v1.13.4, v1.14.11.13.79
OSV records
GO-2024-2780
Also known as
GHSA-r76g-g87f-vw8f

Charts affected

10 by stars
ChartLatestAffected imagesRadar Score
rke2-multusrke2-charts3.7.1-build20210416011 of 2See more

rke2-multus rke2-charts 3.7.1-build2021041601

1 of the 2 container images this version deploys carry CVE-2019-11245.

Container imageDigestPackageFixed in
rancher/hardened-multus-cni:v3.7.1-build202104168eb8092f0728
k8s.io/kubernetes@v1.13.0
1.13.7

Open the chart page →

4,519
multusgeek-cookbookVerified publisher3.5.21 of 3See more

multus geek-cookbook 3.5.2

1 of the 3 container images this version deploys carry CVE-2019-11245.

Container imageDigestPackageFixed in
ghcr.io/k8snetworkplumbingwg/multus-cni:v3.7.1e72aa733faf2
k8s.io/kubernetes@v1.13.0
1.13.7

Open the chart page →

4,906
yataiyataiVerified publisher0.4.61 of 2See more

yatai yatai 0.4.6

1 of the 2 container images this version deploys carry CVE-2019-11245.

Container imageDigestPackageFixed in
quay.io/bentoml/yatai:0.4.614b482c1f1b8
k8s.io/kubernetes@v1.13.4
1.13.7

Open the chart page →

4,039
external-service-operatorcrowdfox0.1.01 of 1See more

external-service-operator crowdfox 0.1.0

1 of the 1 container images this version deploys carry CVE-2019-11245.

Container imageDigestPackageFixed in
crowdfox/external-service-operator:v1.1.06fa7e8063d27
k8s.io/kubernetes@v1.13.4
1.13.7

Open the chart page →

4,624
exa-csiexa-csi-driver0.2.0-rev21 of 6See more

exa-csi exa-csi-driver 0.2.0-rev2

1 of the 6 container images this version deploys carry CVE-2019-11245.

Container imageDigestPackageFixed in
quay.io/ddn/exascaler-csi-file-driver:v2.2.6fe2e2e5a2751
k8s.io/kubernetes@v1.14.1
1.13.7

Open the chart page →

7,048
csi-qingcloudkubesphere-stable1.4.01 of 6See more

csi-qingcloud kubesphere-stable 1.4.0

1 of the 6 container images this version deploys carry CVE-2019-11245.

Container imageDigestPackageFixed in
csiplugin/csi-qingcloud:v1.4.00766163dc046
k8s.io/kubernetes@v1.14.1
1.13.7

Open the chart page →

12,402
csi-qingcloudkubesphere-testVerified publisher1.4.01 of 6See more

csi-qingcloud kubesphere-test 1.4.0

1 of the 6 container images this version deploys carry CVE-2019-11245.

Container imageDigestPackageFixed in
csiplugin/csi-qingcloud:v1.4.00766163dc046
k8s.io/kubernetes@v1.14.1
1.13.7

Open the chart page →

12,402
kommandermesosphere-stable0.39.21 of 29See more

kommander mesosphere-stable 0.39.2

1 of the 29 container images this version deploys carry CVE-2019-11245.

Container imageDigestPackageFixed in
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
k8s.io/kubernetes@v1.14.1
1.13.7

Open the chart page →

68,284
gloo-meshsolo-gloo-mesh1.1.21 of 1See more

gloo-mesh solo-gloo-mesh 1.1.2

1 of the 1 container images this version deploys carry CVE-2019-11245.

Container imageDigestPackageFixed in
gcr.io/gloo-mesh/gloo-mesh:1.1.2a4011eae6a0b
k8s.io/kubernetes@v1.13.0
1.13.7

Open the chart page →

3,257
cost-analyzerstatcan1.82.21 of 9See more

cost-analyzer statcan 1.82.2

1 of the 9 container images this version deploys carry CVE-2019-11245.

Container imageDigestPackageFixed in
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
k8s.io/kubernetes@v1.14.1
1.13.7

Open the chart page →

16,506

Container images carrying it

9 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
csiplugin/csi-qingcloud:v1.4.00766163dc046
k8s.io/kubernetes@v1.14.1
1.13.7
2
crowdfox/external-service-operator:v1.1.06fa7e8063d27
k8s.io/kubernetes@v1.13.4
1.13.7
1
rancher/hardened-multus-cni:v3.7.1-build202104168eb8092f0728
k8s.io/kubernetes@v1.13.0
1.13.7
1
gcr.io/gloo-mesh/gloo-mesh:1.1.2a4011eae6a0b
k8s.io/kubernetes@v1.13.0
1.13.7
1
gcr.io/kubecost1/server:prod-1.82.22b1a3d08caac
k8s.io/kubernetes@v1.14.1
1.13.7
1
gcr.io/kubecost1/server:prod-1.81.0a348db3e4d74
k8s.io/kubernetes@v1.14.1
1.13.7
1
ghcr.io/k8snetworkplumbingwg/multus-cni:v3.7.1e72aa733faf2
k8s.io/kubernetes@v1.13.0
1.13.7
1
quay.io/bentoml/yatai:0.4.614b482c1f1b8
k8s.io/kubernetes@v1.13.4
1.13.7
1
quay.io/ddn/exascaler-csi-file-driver:v2.2.6fe2e2e5a2751
k8s.io/kubernetes@v1.14.1
1.13.7
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.