Go/k8s.io/apimachinery CVE-2020-8559: unknown, EPSS 6.10%
Privilege Escalation in Kubernetes in k8s.io/apimachinery
Action: Upgrade k8s.io/apimachinery to 0.16.13 or later.
go get k8s.io/apimachinery@v0.16.13go get k8s.io/apimachinery@v0.17.9go get k8s.io/apimachinery@v0.18.7-rc.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.16.13 | - |
| 0.17.0 | 0.17.9 | - |
| 0.18.0 | 0.18.7-rc.0 | - |
Fixed versions
| 0.16.13 | 0.17.9 | 0.18.7-rc.0 |
Sources
- osv: GO-2024-2748
- https://github.com/advisories/GHSA-33c5-9fx5-fvjm
- https://bugzilla.redhat.com/show_bug.cgi?id=1851422
- https://github.com/kubernetes/kubernetes/issues/92914
- https://github.com/kubernetes/kubernetes/pull/92941
- https://github.com/tdwyer/CVE-2020-8559
- https://groups.google.com/d/msg/kubernetes-security-announce/JAIGG5yNROs/19nHQ5wkBwAJ
- https://groups.google.com/g/kubernetes-security-announce/c/JAIGG5yNROs
- https://security.netapp.com/advisory/ntap-20200810-0004
CVE-2020-8559 · published · modified · JSON