REDHAT-BUG-1858981
First published: Tue Jul 21 2020(Updated: )
The Restricted Security Context Constraints (SCC) allows pods to craft custom network packets. An attacker can use this flaw to cause a denial of service attack on an OpenShift Container Platform cluster if they have the ability to deploy pods.
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Red Hat OpenShift Container Platform for IBM LinuxONE |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://docs.docker.com/engine/reference/run/#runtime-privilege-and-linux-capabilities
- https://github.com/opencontainers/runc/blob/master/libcontainer/SPEC.md#security
- https://docs.openshift.com/container-platform/3.11/architecture/networking/network_plugins.html
- https://access.redhat.com/errata/RHSA-2020:4320
- https://access.redhat.com/security/cve/cve-2020-14336
- https://access.redhat.com/errata/RHSA-2020:4298
- https://access.redhat.com/solutions/5611521
- https://docs.openshift.com/container-platform/3.11/admin_guide/manage_scc.html
- https://bugzilla.redhat.com/show_bug.cgi?id=1858981
Frequently Asked Questions
What is the severity of REDHAT-BUG-1858981?
The severity of REDHAT-BUG-1858981 is considered high due to the potential for denial of service attacks on OpenShift Container Platform clusters.
How do I fix REDHAT-BUG-1858981?
To fix REDHAT-BUG-1858981, ensure that restricted security context constraints are properly configured to prevent unauthorized pod deployment.
Who is affected by REDHAT-BUG-1858981?
Users of Red Hat OpenShift Container Platform who can deploy pods are affected by REDHAT-BUG-1858981.
What types of attacks can REDHAT-BUG-1858981 facilitate?
REDHAT-BUG-1858981 can facilitate denial of service attacks against OpenShift Container Platform clusters.
What components are involved in REDHAT-BUG-1858981?
The components involved in REDHAT-BUG-1858981 are the Restricted Security Context Constraints and pod deployment functionality within OpenShift.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2020-14336
- agent/severity
- agent/references
- agent/description
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- agent/guess-ai
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/red hat
- canonical/red hat openshift container platform for ibm linuxone