CVE-2020-27833: Input Validation
First published: Wed Dec 09 2020(Updated: )
A vulnerability was found in all versions of the `oc` binary packaged in openshift-clients, limited to the `oc image extract` command. An arbitrary file read and/or write can be achieved using a specially crafted container image (.tar file) that holds symbolic links. When a symbolic link is first created pointing within the tarball this bypasses the existing path checks. Subsequent symbolic links can then be created to link outside of the tarball's parent directory. If an executable or configuration file can be overwritten as a result, the vulnerability can turn into arbitrary code execution.
Credit: secalert@redhat.com secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat OpenShift Container Platform | <=4.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2020-27833?
CVE-2020-27833 has a medium severity level due to the potential for arbitrary file read and write operations.
How can I fix CVE-2020-27833?
To fix CVE-2020-27833, upgrade to a version of openshift-clients that is later than a fixed release for versions 4.7 of Red Hat OpenShift Container Platform.
Which versions of OpenShift Container Platform are affected by CVE-2020-27833?
CVE-2020-27833 affects all versions of OpenShift Container Platform up to 4.7.
What components are impacted by CVE-2020-27833?
CVE-2020-27833 specifically impacts the 'oc' binary and the 'oc image extract' command in the OpenShift clients.
What kind of exploit can CVE-2020-27833 enable?
CVE-2020-27833 enables malicious actors to read from or write to arbitrary files through crafted container images with symbolic links.
- agent/type
- agent/first-publish-date
- agent/references
- agent/author
- agent/weakness
- agent/severity
- agent/description
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2020-27833
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/softwarecombine
- agent/tags
- agent/source
- vendor/redhat
- canonical/red hat openshift container platform
- version/red hat openshift container platform/4.7