The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain a security issue which allows adjacent hosts to reach TCP and UDP services bound to 127.0.0.1 running on the node or in the node's network namespace. Such a service is generally thought to be reachable only by other processes on the same host, but due to this defeect, could be reachable by other hosts on the same LAN as the node, or by containers running on the same node as the service.

The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:3183 advisory.

  - kubernetes: node localhost services reachable via martian packets (CVE-2020-8558)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

An update of the kubernetes package has been released.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2992 advisory.

  - cri-o: infra container reparented to systemd following OOM Killer killing it's conmon (CVE-2019-14891)

  - nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a     constructor or __proto__ payload (CVE-2020-7598)

  - kubernetes: Use of unbounded 'client' label in apiserver_request_total allows for memory exhaustion     (CVE-2020-8552)

  - kubernetes: node localhost services reachable via martian packets (CVE-2020-8558)

  - proglottis/gpgme: Use-after-free in GPGME bindings during container image pull (CVE-2020-8945)

  - openshift/console: text injection on error page via crafted url (CVE-2020-10715)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2927 advisory.

  - kubernetes: node localhost services reachable via martian packets (CVE-2020-8558)

  - proglottis/gpgme: Use-after-free in GPGME bindings during container image pull (CVE-2020-8945)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:2413 advisory.

  - kubernetes: credential leak in kube-controller-manager via error messages in mount failure logs and events     for AzureFile and CephFS volumes (CVE-2019-11252)

  - kubernetes: Denial of service in API server via crafted YAML payloads by authorized users (CVE-2019-11254)

  - kubernetes: node localhost services reachable via martian packets (CVE-2020-8558)

  - proglottis/gpgme: Use-after-free in GPGME bindings during container image pull (CVE-2020-8945)

  - golang.org/x/crypto: Processing of crafted ssh-ed25519 public keys allows for panic (CVE-2020-9283)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
170333	RHEL 7 / 8 : OpenShift Container Platform 4.3.31 openshift (RHSA-2020:3183)	Nessus	Red Hat Local Security Checks	high
139514	Photon OS 2.0: Kubernetes PHSA-2020-2.0-0270	Nessus	PhotonOS Local Security Checks	high
139512	Photon OS 3.0: Kubernetes PHSA-2020-3.0-0123	Nessus	PhotonOS Local Security Checks	high
139006	RHEL 7 : OpenShift Container Platform 3.11 (RHSA-2020:2992)	Nessus	Red Hat Local Security Checks	high
138765	RHEL 7 / 8 : OpenShift Container Platform 4.4.13 machine-config-daemon and openshift (RHSA-2020:2927)	Nessus	Red Hat Local Security Checks	high
138387	RHEL 7 / 8 : OpenShift Container Platform 4.5 package (RHSA-2020:2413)	Nessus	Red Hat Local Security Checks	high

Detections

Analytics

CVE-2020-8558

high

Tenable Plugins

high

high

high

high

high

high