UpHeron
All vulnerabilities

Servers and applications

CVE-2019-11248

The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is exposed over the Kubelet's healthz port. This debugging endpoint can potentially leak sensitive information such as internal Kubelet memory addresses and configuration, or for limited denial of service. Versions prior to 1.15.0, 1.14.4, 1.13.8, and 1.12.10 are affected. The…

Severity
High 8.2
Published
29 Aug 2019
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.12.10
Exploit chance
75% in the next 30 daysHigher than 99% of CVEs. EPSS by FIRST, 10 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
KubernetesServers and applications · cpe:a:kubernetes:kubernetes
  • Version 1.15.0-rc1
  • Version 1.15.0-beta2
  • Version 1.15.0-beta1
  • Version 1.15.0-beta0
All 50 release lines
  • Every version before 1.12.10
  • Version 1.13.0-alpha0
  • Version 1.13.0-alpha1
  • Version 1.13.0-alpha2
  • Version 1.13.0-alpha3
  • Version 1.13.0-beta0
  • Version 1.13.0-beta1
  • Version 1.13.0-beta2
  • Version 1.13.0-rc1
  • Version 1.13.0-rc2
  • Version 1.13.0
  • Version 1.13.1-beta0
  • Version 1.13.1
  • Version 1.13.2-beta0
  • Version 1.13.2
  • Version 1.13.3-beta0
  • Version 1.13.3
  • Version 1.13.4-beta0
  • Version 1.13.4
  • Version 1.13.5-beta0
  • Version 1.13.5
  • Version 1.13.6-beta0
  • Version 1.13.6
  • Version 1.13.7-beta.0
  • Version 1.13.7
  • Version 1.13.8-beta.0
  • Version 1.14.0-alpha0
  • Version 1.14.0-alpha1
  • Version 1.14.0-alpha2
  • Version 1.14.0-alpha3
  • Version 1.14.0-beta0
  • Version 1.14.0-beta1
  • Version 1.14.0-beta2
  • Version 1.14.0-rc1
  • Version 1.14.0
  • Version 1.14.1-beta0
  • Version 1.14.1
  • Version 1.14.2-beta0
  • Version 1.14.2
  • Version 1.14.3-beta0
  • Version 1.14.3
  • Version 1.14.4-beta.0
  • Version 1.15.0-alpha0
  • Version 1.15.0-alpha1
  • Version 1.15.0-alpha2
  • Version 1.15.0-alpha3
  • Version 1.15.0-beta0
  • Version 1.15.0-beta1
  • Version 1.15.0-beta2
  • Version 1.15.0-rc1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2019-11248
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2019-11248