Skip to content
OpenAdvisories
Medium RHSA-2020:1276 1 CVE

Red Hat Security Advisory: OpenShift Container Platform 4.3.10 openshift security update

Published Sep 16, 2024 · Updated Feb 24, 2026

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.3::el7 openshift 0:4.3.10-202003300855.git.0.da48c1d.el7
Red Hat · OpenShift 4 openshift:4.3::el7 openshift-hyperkube 0:4.3.10-202003300855.git.0.da48c1d.el7
Red Hat · OpenShift 4 openshift:4.3::el8 openshift 0:4.3.10-202003300855.git.0.da48c1d.el8
Red Hat · OpenShift 4 openshift:4.3::el8 openshift-hyperkube 0:4.3.10-202003300855.git.0.da48c1d.el8

Vulnerabilities 1

  • Medium 4.3
    CVE-2020-8551

    Kubernetes kubelet denial of service

    The Kubelet component in versions 1.15.0-1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via the kubelet API, including the unauthenticated HTTP read-only API typically served on port 10255, and the authe…

    Kubernetes Kubernetes k8s.io/kubernetes kubernetes Debian Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1816403
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1276.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-8551
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-8551
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-8551
  • article
    https://github.com/kubernetes/kubernetes/issues/89377
  • article
    https://groups.google.com/forum/#!topic/kubernetes-security-announce/2UOlsba2g0s