CVE-2020-14336: Medium severity red hat openshift container platform vulnerability
A flaw was found in the Restricted Security Context Constraints (SCC), where it allows pods to craft custom network packets. This flaw allows an attacker to cause a denial of service attack on an OpenShift Container Platform cluster if they can deploy pods. The highest threat from this vulnerability is to system availability.
Other sources
The Restricted Security Context Constraints (SCC) allows pods to craft custom network packets. An attacker can use this flaw to cause a denial of service attack on an OpenShift Container Platform cluster if they have the ability to deploy pods.
— Red Hat
Affected Software
Remediation
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is the severity of CVE-2020-14336?
CVE-2020-14336 has been classified with a high severity level due to its potential to enable denial of service attacks.
How do I fix CVE-2020-14336?
To mitigate CVE-2020-14336, it is recommended to apply the latest patches provided by Red Hat for affected OpenShift Container Platform versions.
Which versions of OpenShift Container Platform are affected by CVE-2020-14336?
CVE-2020-14336 affects Red Hat OpenShift Container Platform versions 3.11, 4.5.16, and 4.6.
What kind of attacks can be executed using CVE-2020-14336?
CVE-2020-14336 allows attackers to craft custom network packets leading to potential denial of service attacks on the OpenShift cluster.
Is CVE-2020-14336 applicable only to OpenShift platforms?
CVE-2020-14336 specifically impacts OpenShift Container Platform environments where pods can be deployed.