Go/k8s.io/kubernetes CVE-2020-8559: unknown, EPSS 6.10%

Privilege Escalation in Kubernetes in k8s.io/apimachinery

Action: Upgrade k8s.io/kubernetes to 1.16.13 or later.

go get k8s.io/kubernetes@v1.16.13

go get k8s.io/kubernetes@v1.17.9

go get k8s.io/kubernetes@v1.18.7

Affected

Fixed versions

Sources

• osv: GO-2024-2748#Go/k8s.io/kubernetes
• https://github.com/advisories/GHSA-33c5-9fx5-fvjm
• https://bugzilla.redhat.com/show_bug.cgi?id=1851422
• https://github.com/kubernetes/kubernetes/issues/92914
• https://github.com/kubernetes/kubernetes/pull/92941
• https://github.com/tdwyer/CVE-2020-8559
• https://groups.google.com/d/msg/kubernetes-security-announce/JAIGG5yNROs/19nHQ5wkBwAJ
• https://groups.google.com/g/kubernetes-security-announce/c/JAIGG5yNROs
• https://security.netapp.com/advisory/ntap-20200810-0004

CVE-2020-8559 · published 2024-05-20T19:46:32Z · modified 2026-02-04T03:58:08.676647Z · JSON