Red Hat Security Advisory

RHSA-2020:3183

OpenShift Container Platform 4.3.31 openshift security update

Released 2020-08-05 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.3 openshift-4.3.31-202007280738.p0.git.0.9884401.el7, openshift-4.3.31-202007280738.p0.git.0.9884401.el8, openshift-hyperkube-4.3.31-202007280738.p0.git.0.9884401.el7 +1

Fixes 1 record

TI-2020-06857 CVE-2020-8558 · GHSA-wqv3-8cm6-h6wg

Kubernetes node setting allows for neighboring hosts to bypass localhost boundary

MEDIUM 44

The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain a security issue which allows adjacent hosts to reach TCP and UDP services bound to 127.0.0.1 runnin…

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.03418 Published 2020-07-27 Fixed in 1.18.4, 1.17.7 +1 CWE-420