CERT24RHSA-2020:3809 — Red Hat Security Advisory: OpenShift Container Platform 4.3.38 container image security updateLoading data…
CERT24Threat Observatory
Period

RHSA-2020:3809 — Red Hat Security Advisory: OpenShift Container Platform 4.3.38 container image security update

The source describes two denial-of-service vulnerabilities. In Kubernetes, the amount of disk space that the /etc/hosts file can use is unconstrained. Attacker-controlled pods may cause a denial of service if they have permission to write to the node's /etc/hosts file. In the SSH package of the golang.org/x/crypto library, specially crafted SSH ed25519 keys may cause applications using the package as an SSH client or server to crash.

← Back to intelligence

RHSA-2020:3809 — Red Hat Security Advisory: OpenShift Container Platform 4.3.38 container image security update

The source describes two denial-of-service vulnerabilities. In Kubernetes, the amount of disk space that the /etc/hosts file can use is unconstrained. Attacker-controlled pods may cause a denial of service if they have permission to write to the node's /etc/hosts file. In the SSH package of the golang.org/x/crypto library, specially crafted SSH ed25519 keys may cause applications using the package as an SSH client or server to crash.