Skip to content
OpenAdvisories
Medium RHSA-2020:3183 1 CVE

Red Hat Security Advisory: OpenShift Container Platform 4.3.31 openshift security update

Published Sep 16, 2024 · Updated Nov 22, 2025

Ecosystem: Red Hat

Fixed packages 4

ReleasePackageFixed in
Red Hat · OpenShift 4 openshift:4.3::el7 openshift 0:4.3.31-202007280738.p0.git.0.9884401.el7
Red Hat · OpenShift 4 openshift:4.3::el7 openshift-hyperkube 0:4.3.31-202007280738.p0.git.0.9884401.el7
Red Hat · OpenShift 4 openshift:4.3::el8 openshift 0:4.3.31-202007280738.p0.git.0.9884401.el8
Red Hat · OpenShift 4 openshift:4.3::el8 openshift-hyperkube 0:4.3.31-202007280738.p0.git.0.9884401.el8

Vulnerabilities 1

  • Medium 5.4
    CVE-2020-8558 Public exploit

    Kubernetes node setting allows for neighboring hosts to bypass localhost boundary

    The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain a security issue which allows adjacent hosts to reach TCP and UDP services bound to 127.0.0.1 running on the node or in the node's network …

    Kubernetes Kubernetes k8s.io/kubernetes kubernetes Debian Go

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1843358
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_3183.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-8558
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-8558
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-8558
  • article
    https://groups.google.com/g/kubernetes-security-announce/c/B1VegbBDMTE