CVE-2021-20182: High severity red hat openshift container platform vulnerability
A privilege escalation flaw was found in openshift4/ose-docker-builder. The build container runs with high privileges using a chrooted environment instead of runc. If an attacker can gain access to this build container, they can potentially utilize the raw devices of the underlying node, such as the network and storage devices, to at least escalate their privileges to that of the cluster admin. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Other sources
A privilege escalation vulnerability exists in the build functionality of OpenShift Container Platform. An attacker with 'admin' role in a project is able to escalate privileges to cluster-admin cluster role if builds are enabled.
— Red Hat
Affected Software
Remediation
Patch Available
Information
Event History
Parent advisories
This vulnerability appears in the following advisories.
Frequently Asked Questions
What is CVE-2021-20182?
CVE-2021-20182 is a privilege escalation vulnerability found in openshift4/ose-docker-builder, which allows an attacker to gain access to the build container and utilize the raw devices of the underlying node.
How does CVE-2021-20182 affect the software?
CVE-2021-20182 affects the openshift4/ose-docker-builder package version up to exclusive 6, running with high privileges in a chrooted environment instead of runc.
What is the severity of CVE-2021-20182?
CVE-2021-20182 has a severity rating of 8.8 (high).
How can I fix CVE-2021-20182?
To fix CVE-2021-20182, update the openshift4/ose-docker-builder package to version 6 or later.
Where can I find more information about CVE-2021-20182?
More information about CVE-2021-20182 can be found at the following references: - [CVE-2021-20182 - CVE Detail](https://www.cve.org/CVERecord?id=CVE-2021-20182) - [CVE-2021-20182 - NVD](https://nvd.nist.gov/vuln/detail/CVE-2021-20182) - [Bugzilla - Red Hat](https://bugzilla.redhat.com/show_bug.cgi?id=1915110) - [Red Hat Security Advisory - RHSA-2021:0281](https://access.redhat.com/errata/RHSA-2021:0281)