Red Hat Security Advisory

RHSA-2021:3915

OpenShift Container Platform 3.11.542 security update

Released 2021-10-28 · Red Hat rating Moderate · View on Red Hat →

Fixed in

Red Hat OpenShift Container Platform 3.11 atomic-openshift-3.11.542-1.git.0.f2fd300.el7, atomic-openshift-clients-3.11.542-1.git.0.f2fd300.el7, atomic-openshift-clients-redistributable-3.11.542-1.git.0.f2fd300.el7 +10

Fixes 1 record

TI-2020-06856 CVE-2020-8557 · GHSA-55qj-gj3x-jq9r

Kubernetes node disk Denial of Service by writing to container /etc/hosts

LOW 25

The Kubernetes kubelet component in versions 1.1-1.16.12, 1.17.0-1.17.8 and 1.18.0-1.18.5 do not account for disk usage by a pod which writes to its own /etc/hosts file.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00434 Published 2020-07-23 Fixed in 1.18.6, 1.17.9 +1 CWE-400