Red Hat Security Advisory

RHSA-2020:0933

OpenShift Container Platform 4.3.9 ose-openshift-apiserver-container security update

Released 2020-04-01 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.3 openshift4/ose-openshift-apiserver-rhel7

Fixes 2 records

TI-2019-08424 CVE-2019-11254 · GHSA-wxc4-f4m6-wwqv

Kubernetes API Server denial of service vulnerability from malicious YAML payloads

LOW 35

The Kubernetes API Server component in versions 1.1-1.14, and versions prior to 1.15.10, 1.16.7 and 1.17.3 allows an authorized user who sends malicious YAML payloads to cause the kube-apiserver to consume excessive CPU…

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.03157 Published 2020-04-01 Partial fix · 1.15.10, 1.16.7 +2 CWE-1050

TI-2020-06852 CVE-2020-8552 · GHSA-82hx-w2r5-c2wq

Kubernetes API server denial of service

LOW 29

The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02845 Published 2020-03-27 Partial fix · v1.17.3, v1.16.7 +4 CWE-789