Read the docs
Red Hat Security Advisory

RHSA-2019:3239

OpenShift Container Platform 3.10 atomic-openshift security update

Released 2019-10-29 · Red Hat rating Important · View on Red Hat →

Fixed in

Fixes 3 records

TI-2019-08423 CVE-2019-11253 · GHSA-pmqp-h87c-mr78

Kubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack

Priority MEDIUM 54

Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.25939 Published 2019-10-17 Partial fix · 1.13.12, 1.14.8 +2 CWE-20
TI-2019-15843 CVE-2019-1002100 · GHSA-q4rr-64r9-fwgf

Resource allocation without limits in Kubernetes

Priority MEDIUM 46

In all Kubernetes versions prior to v1.11.8, v1.12.6, and v1.13.4, users that are authorized to make patch requests to the Kubernetes API Server can send a specially crafted patch of type "json-patch" (e.g.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.16934 Published 2019-04-01 Partial fix · v1.11.8, v1.12.6 +4 CWE-770
TI-2019-08419 CVE-2019-11249 · GHSA-v8c4-hw4j-x4pr

kubectl cp allows symlink directory traversal

Priority LOW 35

The kubectl cp command allows copying files between containers and the user machine.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.03749 Published 2019-08-29 Fixed in 1.13.9, 1.14.5 +1 CWE-61