Red Hat Security Advisory

RHSA-2020:3520

OpenShift Container Platform 4.5.7 openshift-enterprise-hyperkube-container security update

Released 2020-08-24 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 4.5 openshift4/ose-hyperkube

Fixes 1 record

TI-2020-06856 CVE-2020-8557 · GHSA-55qj-gj3x-jq9r

Kubernetes node disk Denial of Service by writing to container /etc/hosts

LOW 25

The Kubernetes kubelet component in versions 1.1-1.16.12, 1.17.0-1.17.8 and 1.18.0-1.18.5 do not account for disk usage by a pod which writes to its own /etc/hosts file.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00434 Published 2020-07-23 Fixed in 1.18.6, 1.17.9 +1 CWE-400