VDB

RHSA-2020%3A3580

RHSA-2020%3A3580 PUBLISHED CVSS 5.5 MEDIUM

A flaw was found in Kubernetes, where the amount of disk space the /etc/hosts file can use is unconstrained . This flaw can allow attacker-controlled pods to cause a denial of service if they have permission to write to the node's /etc/hosts file.

Risk Scores

CVSS 3.1
5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Affected Products

VendorProductVersions
Red Hatopenshift4/ose-hyperkube@sha256:506ed9928ad388879b3eb077ba9d738aa17f8e574b9274f7d4aff1fa97225b0d_ppc64le as a component of Red Hat OpenShift Container Platform 4.4openshift4/ose-hyperkube@sha256:506ed9928ad388879b3eb077ba9d738aa17f8e574b9274f7d4aff1fa97225b0d_ppc64le
Red Hatopenshift4/ose-hyperkube@sha256:ebbc8bbb5beb73a73b46f4a9c7a83eb2e25142c2fd08b7481b79013ebfec0052_amd64 as a component of Red Hat OpenShift Container Platform 4.4openshift4/ose-hyperkube@sha256:ebbc8bbb5beb73a73b46f4a9c7a83eb2e25142c2fd08b7481b79013ebfec0052_amd64
Red Hatopenshift4/ose-hyperkube@sha256:7c085a5778b2abbfba07bd68abc925ec3618ee8d5b9c58acd243c31e507853e9_s390x as a component of Red Hat OpenShift Container Platform 4.4openshift4/ose-hyperkube@sha256:7c085a5778b2abbfba07bd68abc925ec3618ee8d5b9c58acd243c31e507853e9_s390x

Timeline

  • Sep 1, 2020 CVE Published
  • Nov 21, 2025 CVE Updated
  • May 1, 2026 Distribution Patch
  • May 1, 2026 Distribution Patch
  • May 1, 2026 Security Advisory
  • May 1, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 100/wk Open console ›