Summary
kubernetes
[1.12.10-1.0.12]
- CVE-2020-10749: IPv4 only clusters susceptible to MitM attacks via IPv6 rogue router advertisements
- CVE-2020-8555: Half-Blind SSRF in kube-controller-manager
kubeadm-ha-setup
[0.0.2-1.0.70]
- Enhance image tag read to depend on kubeadm-registry.sh for CVE release
CVE-2020-10749: IPv4 only clusters susceptible to MitM attacks via IPv6 rogue router advertisements
CVE-2020-8555: Half-Blind SSRF in kube-controller-manager
kubernetes-cni
[0.7.1-1.0.1]
- Added Oracle specific build files for Kubernetes CNI
kubernetes-cni-plugins
[0.8.6-1.0.1]
- Added Oracle specific build files for Kubernetes CNI Plugins
Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 7 | kubeadm | 0:1.12.10-1.0.12.el7 |
| Oracle Linux · 7 | kubeadm-ha-setup | 0:0.0.2-1.0.70.el7 |
| Oracle Linux · 7 | kubectl | 0:1.12.10-1.0.12.el7 |
| Oracle Linux · 7 | kubelet | 0:1.12.10-1.0.12.el7 |
| Oracle Linux · 7 | kubernetes-cni | 0:0.7.1-1.0.1.el7 |
| Oracle Linux · 7 | kubernetes-cni-plugins | 0:0.8.6-1.0.2.el7 |
Vulnerabilities 2
-
Medium 6.3
Kubernetes kube-controller-manager SSRF
The Kubernetes kube-controller-manager in versions v1.0-1.14, versions prior to v1.15.12, v1.16.9, v1.17.5, and version v1.18.0 are vulnerable to a Server Side Request Forgery (SSRF) that allows certain authorized users to leak up to 500 bytes of arbitrary in…
-
Medium 6.0CVE-2020-10749 Public exploit
containernetworking/plugins vulnerable to MitM attacks
A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IP…