{"id":"CVE-2019-11248","details":"The debugging endpoint /debug/pprof is exposed over the unauthenticated Kubelet healthz port. The go pprof endpoint is exposed over the Kubelet's healthz port. This debugging endpoint can potentially leak sensitive information such as internal Kubelet memory addresses and configuration, or for limited denial of service. Versions prior to 1.15.0, 1.14.4, 1.13.8, and 1.12.10 are affected. The issue is of medium severity, but not exposed by the default configuration.","modified":"2026-08-07T11:48:16.564159418Z","published":"2019-08-29T01:15:11.367Z","database_specific":{"unresolved_ranges":[{"vendor_product":"kubernetes:kubernetes","cpes":["cpe:2.3:a:kubernetes:kubernetes:1.13.0:alpha0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.0:alpha1:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.0:alpha2:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.0:alpha3:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.0:beta0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.0:beta1:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.0:beta2:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.0:rc1:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.0:rc2:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.1:beta0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.2:beta0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.3:beta0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.4:beta0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.5:beta0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.6:beta0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.14.0:alpha0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.14.0:alpha1:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.14.0:alpha2:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.14.0:alpha3:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.14.0:beta0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.14.0:beta1:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.14.0:beta2:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.14.0:rc1:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.14.1:beta0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.14.2:beta0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.14.3:beta0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.15.0:alpha0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.15.0:alpha1:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.15.0:alpha2:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.15.0:alpha3:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.15.0:beta0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.15.0:beta1:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.15.0:beta2:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.15.0:rc1:*:*:*:*:*:*"],"extracted_events":[{"introduced":"1.13.0-alpha0"},{"last_affected":"1.13.0-alpha0"},{"introduced":"1.13.0-alpha0"},{"last_affected":"1.13.0-alpha0"},{"introduced":"1.13.0-alpha1"},{"last_affected":"1.13.0-alpha1"},{"introduced":"1.13.0-alpha1"},{"last_affected":"1.13.0-alpha1"},{"introduced":"1.13.0-alpha2"},{"last_affected":"1.13.0-alpha2"},{"introduced":"1.13.0-alpha2"},{"last_affected":"1.13.0-alpha2"},{"introduced":"1.13.0-alpha3"},{"last_affected":"1.13.0-alpha3"},{"introduced":"1.13.0-alpha3"},{"last_affected":"1.13.0-alpha3"},{"introduced":"1.13.0-beta0"},{"last_affected":"1.13.0-beta0"},{"introduced":"1.13.0-beta0"},{"last_affected":"1.13.0-beta0"},{"introduced":"1.13.0-beta1"},{"last_affected":"1.13.0-beta1"},{"introduced":"1.13.0-beta1"},{"last_affected":"1.13.0-beta1"},{"introduced":"1.13.0-beta2"},{"last_affected":"1.13.0-beta2"},{"introduced":"1.13.0-beta2"},{"last_affected":"1.13.0-beta2"},{"introduced":"1.13.0-rc1"},{"last_affected":"1.13.0-rc1"},{"introduced":"1.13.0-rc1"},{"last_affected":"1.13.0-rc1"},{"introduced":"1.13.0-rc2"},{"last_affected":"1.13.0-rc2"},{"introduced":"1.13.0-rc2"},{"last_affected":"1.13.0-rc2"},{"introduced":"1.13.1-beta0"},{"last_affected":"1.13.1-beta0"},{"introduced":"1.13.1-beta0"},{"last_affected":"1.13.1-beta0"},{"introduced":"1.13.2-beta0"},{"last_affected":"1.13.2-beta0"},{"introduced":"1.13.2-beta0"},{"last_affected":"1.13.2-beta0"},{"introduced":"1.13.3-beta0"},{"last_affected":"1.13.3-beta0"},{"introduced":"1.13.3-beta0"},{"last_affected":"1.13.3-beta0"},{"introduced":"1.13.4-beta0"},{"last_affected":"1.13.4-beta0"},{"introduced":"1.13.4-beta0"},{"last_affected":"1.13.4-beta0"},{"introduced":"1.13.5-beta0"},{"last_affected":"1.13.5-beta0"},{"introduced":"1.13.5-beta0"},{"last_affected":"1.13.5-beta0"},{"introduced":"1.13.6-beta0"},{"last_affected":"1.13.6-beta0"},{"introduced":"1.13.6-beta0"},{"last_affected":"1.13.6-beta0"},{"introduced":"1.14.0-alpha0"},{"last_affected":"1.14.0-alpha0"},{"introduced":"1.14.0-alpha0"},{"last_affected":"1.14.0-alpha0"},{"introduced":"1.14.0-alpha1"},{"last_affected":"1.14.0-alpha1"},{"introduced":"1.14.0-alpha1"},{"last_affected":"1.14.0-alpha1"},{"introduced":"1.14.0-alpha2"},{"last_affected":"1.14.0-alpha2"},{"introduced":"1.14.0-alpha2"},{"last_affected":"1.14.0-alpha2"},{"introduced":"1.14.0-alpha3"},{"last_affected":"1.14.0-alpha3"},{"introduced":"1.14.0-alpha3"},{"last_affected":"1.14.0-alpha3"},{"introduced":"1.14.0-beta0"},{"last_affected":"1.14.0-beta0"},{"introduced":"1.14.0-beta0"},{"last_affected":"1.14.0-beta0"},{"introduced":"1.14.0-beta1"},{"last_affected":"1.14.0-beta1"},{"introduced":"1.14.0-beta1"},{"last_affected":"1.14.0-beta1"},{"introduced":"1.14.0-beta2"},{"last_affected":"1.14.0-beta2"},{"introduced":"1.14.0-beta2"},{"last_affected":"1.14.0-beta2"},{"introduced":"1.14.0-rc1"},{"last_affected":"1.14.0-rc1"},{"introduced":"1.14.0-rc1"},{"last_affected":"1.14.0-rc1"},{"introduced":"1.14.1-beta0"},{"last_affected":"1.14.1-beta0"},{"introduced":"1.14.1-beta0"},{"last_affected":"1.14.1-beta0"},{"introduced":"1.14.2-beta0"},{"last_affected":"1.14.2-beta0"},{"introduced":"1.14.2-beta0"},{"last_affected":"1.14.2-beta0"},{"introduced":"1.14.3-beta0"},{"last_affected":"1.14.3-beta0"},{"introduced":"1.14.3-beta0"},{"last_affected":"1.14.3-beta0"},{"introduced":"1.15.0-alpha0"},{"last_affected":"1.15.0-alpha0"},{"introduced":"1.15.0-alpha0"},{"last_affected":"1.15.0-alpha0"},{"introduced":"1.15.0-alpha1"},{"last_affected":"1.15.0-alpha1"},{"introduced":"1.15.0-alpha1"},{"last_affected":"1.15.0-alpha1"},{"introduced":"1.15.0-alpha2"},{"last_affected":"1.15.0-alpha2"},{"introduced":"1.15.0-alpha2"},{"last_affected":"1.15.0-alpha2"},{"introduced":"1.15.0-alpha3"},{"last_affected":"1.15.0-alpha3"},{"introduced":"1.15.0-alpha3"},{"last_affected":"1.15.0-alpha3"},{"introduced":"1.15.0-beta0"},{"last_affected":"1.15.0-beta0"},{"introduced":"1.15.0-beta0"},{"last_affected":"1.15.0-beta0"},{"introduced":"1.15.0-beta1"},{"last_affected":"1.15.0-beta1"},{"introduced":"1.15.0-beta1"},{"last_affected":"1.15.0-beta1"},{"introduced":"1.15.0-beta2"},{"last_affected":"1.15.0-beta2"},{"introduced":"1.15.0-beta2"},{"last_affected":"1.15.0-beta2"},{"introduced":"1.15.0-rc1"},{"last_affected":"1.15.0-rc1"},{"introduced":"1.15.0-rc1"},{"last_affected":"1.15.0-rc1"}],"source":"CPE_STRING"}]},"references":[{"type":"ADVISORY","url":"https://groups.google.com/d/msg/kubernetes-security-announce/pKELclHIov8/BEDtRELACQAJ"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20190919-0003/"},{"type":"FIX","url":"https://github.com/kubernetes/kubernetes/issues/81023"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/kubernetes/kubelet","events":[{"introduced":"0"},{"fixed":"c20f6e0006cca199d641ad1307ebd9f72c141bc0"},{"introduced":"36ea738c771d6b8a50df632f092f5805818476c3"},{"last_affected":"b8b73f8359a20cf597fc8f80de0419cd75dcd3a7"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"1.12.10"},{"introduced":"1.13.0-NA"},{"last_affected":"1.13.0-NA"},{"introduced":"1.13.1-NA"},{"last_affected":"1.13.1-NA"},{"introduced":"1.13.2-NA"},{"last_affected":"1.13.2-NA"},{"introduced":"1.13.3-NA"},{"last_affected":"1.13.3-NA"},{"introduced":"1.13.4-NA"},{"last_affected":"1.13.4-NA"},{"introduced":"1.13.5-NA"},{"last_affected":"1.13.5-NA"},{"introduced":"1.13.6-NA"},{"last_affected":"1.13.6-NA"},{"introduced":"1.13.7-NA"},{"last_affected":"1.13.7-NA"},{"introduced":"1.13.7-beta\\.0"},{"last_affected":"1.13.7-beta\\.0"},{"introduced":"1.13.8-beta\\.0"},{"last_affected":"1.13.8-beta\\.0"},{"introduced":"1.14.0-NA"},{"last_affected":"1.14.0-NA"},{"introduced":"1.14.1-NA"},{"last_affected":"1.14.1-NA"},{"introduced":"1.14.2-NA"},{"last_affected":"1.14.2-NA"},{"introduced":"1.14.3-NA"},{"last_affected":"1.14.3-NA"},{"introduced":"1.14.4-beta\\.0"},{"last_affected":"1.14.4-beta\\.0"}],"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.0:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.1:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.2:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.3:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.4:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.5:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.6:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.7:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.7:beta.0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.8:beta.0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.14.0:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.14.1:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.14.2:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.14.3:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.14.4:beta.0:*:*:*:*:*:*"]}}],"versions":["1.13.0-NA","1.13.1-NA","1.13.2-NA","1.13.3-NA","1.13.4-NA","1.13.5-NA","1.13.6-NA","1.13.7-NA","1.13.7-beta\\.0","1.13.8-beta\\.0","1.14.0-NA","1.14.1-NA","1.14.2-NA","1.14.3-NA","1.14.4-beta\\.0","kubernetes-1.14.1-beta.0","kubernetes-1.14.0-rc.1","kubernetes-1.14.0","kubernetes-1.12.6-beta.0","kubernetes-1.12.5-beta.0","kubernetes-1.12.5","kubernetes-1.12.4","kubernetes-1.14.4-beta.0","kubernetes-1.14.0-beta.2","kubernetes-1.9.0-alpha.3","kubernetes-1.9.0-alpha.2","kubernetes-1.9.0-alpha.1","kubernetes-1.9.0-alpha.0","kubernetes-1.13.0-alpha.0","kubernetes-1.12.0-beta.0","kubernetes-1.12.0-alpha.1","kubernetes-1.12.0-alpha.0","kubernetes-1.11.0-alpha.2","kubernetes-1.11.0-alpha.1","kubernetes-1.11.0-alpha.0","kubernetes-1.10.0-alpha.3","kubernetes-1.10.0-alpha.2","kubernetes-1.10.0-alpha.1","kubernetes-1.10.0-alpha.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-11248.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/kubernetes/kubernetes","events":[{"introduced":"0"},{"fixed":"e3c134023df5dea457638b614ee17ef234dc34a6"},{"introduced":"ddf47ac13c1a9483ea035a79cd7c10005ff21a6d"},{"last_affected":"ce968390b180e466b8b9a8f5a30401b501e69695"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"fixed":"1.12.10"},{"introduced":"1.13.0-NA"},{"last_affected":"1.13.0-NA"},{"introduced":"1.13.1-NA"},{"last_affected":"1.13.1-NA"},{"introduced":"1.13.2-NA"},{"last_affected":"1.13.2-NA"},{"introduced":"1.13.3-NA"},{"last_affected":"1.13.3-NA"},{"introduced":"1.13.4-NA"},{"last_affected":"1.13.4-NA"},{"introduced":"1.13.5-NA"},{"last_affected":"1.13.5-NA"},{"introduced":"1.13.6-NA"},{"last_affected":"1.13.6-NA"},{"introduced":"1.13.7-NA"},{"last_affected":"1.13.7-NA"},{"introduced":"1.13.7-beta\\.0"},{"last_affected":"1.13.7-beta\\.0"},{"introduced":"1.13.8-beta\\.0"},{"last_affected":"1.13.8-beta\\.0"},{"introduced":"1.14.0-NA"},{"last_affected":"1.14.0-NA"},{"introduced":"1.14.1-NA"},{"last_affected":"1.14.1-NA"},{"introduced":"1.14.2-NA"},{"last_affected":"1.14.2-NA"},{"introduced":"1.14.3-NA"},{"last_affected":"1.14.3-NA"},{"introduced":"1.14.4-beta\\.0"},{"last_affected":"1.14.4-beta\\.0"}],"source":["CPE_RANGE","CPE_STRING"],"cpe":["cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.0:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.1:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.2:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.3:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.4:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.5:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.6:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.7:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.7:beta.0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.13.8:beta.0:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.14.0:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.14.1:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.14.2:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.14.3:-:*:*:*:*:*:*","cpe:2.3:a:kubernetes:kubernetes:1.14.4:beta.0:*:*:*:*:*:*"]}}],"versions":["1.13.0-NA","1.13.1-NA","1.13.2-NA","1.13.3-NA","1.13.4-NA","1.13.5-NA","1.13.6-NA","1.13.7-NA","1.13.7-beta\\.0","1.13.8-beta\\.0","1.14.0-NA","1.14.1-NA","1.14.2-NA","1.14.3-NA","1.14.4-beta\\.0","v1.14.4-beta.0","v1.14.3","v1.12.10-beta.0","v1.12.9","v1.14.3-beta.0","v1.14.2","v1.12.9-beta.0","v1.12.8","v1.14.2-beta.0","v1.14.1","v1.14.1-beta.0","v1.14.0","v1.12.8-beta.0","v1.12.7","v1.14.0-rc.1","v1.14.0-beta.2","v1.14.0-beta.1","v1.12.7-beta.0","v1.12.6","v1.14.0-beta.0","v1.14.0-alpha.3","v1.15.0-alpha.0","v1.14.0-alpha.2","v1.12.5","v1.12.6-beta.0","v1.14.0-alpha.1","v1.12.4","v1.12.5-beta.0","v1.12.4-beta.0","v1.12.3","v1.14.0-alpha.0","v1.13.0-alpha.3","v1.12.2","v1.13.0-alpha.2","v1.12.3-beta.0","v1.13.0-alpha.1","v1.12.2-beta.0","v1.12.1","v1.12.0","v1.12.1-beta.0","v1.12.0-rc.2","v1.12.0-rc.1","v1.12.0-beta.2","v1.12.0-beta.1","v1.12.0-beta.0","v1.13.0-alpha.0","v1.12.0-alpha.1","v1.12.0-alpha.0","v1.11.0-alpha.2","v1.11.0-alpha.1","v1.11.0-alpha.0","v1.10.0-alpha.3","v1.10.0-alpha.2","v1.10.0-alpha.1","v1.9.0-alpha.3","v1.10.0-alpha.0","v1.9.0-alpha.2","v1.9.0-alpha.1","v1.9.0-alpha.0","v1.8.0-alpha.3","v1.8.0-alpha.2","v1.8.0-alpha.0","v1.8.0-alpha.1","v1.7.0-alpha.4","v1.7.0-alpha.3","v1.7.0-alpha.2","v1.7.0-alpha.1","v1.7.0-alpha.0","v1.6.0-alpha.3","v1.6.0-alpha.2","v1.6.0-alpha.1","v1.6.0-alpha.0","v1.5.0-alpha.2","v1.5.0-alpha.1","v1.5.0-alpha.0","v1.4.0-alpha.3","v1.4.0-alpha.1","v1.4.0-alpha.2","v1.3.0-alpha.5","v1.3.0-alpha.4","v1.3.0-alpha.3","v1.3.0-alpha.1","v1.3.0-alpha.2","v1.3.0-alpha.0","v1.2.0-alpha.8","v1.2.0-alpha.7","v1.2.0-alpha.6","v1.2.0-alpha.5","v1.2.0-alpha.4","v1.2.0-alpha.3","v1.2.0-alpha.2","v1.2.0-alpha.1","v1.1.0-alpha.1","v1.1.0-alpha.0","v0.17.0","v0.13.1-dev"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2019-11248.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L"}]}