RHEL 7 / 8 : OpenShift Container Platform 4.3.25 openshift (RHSA-2020:2440)

The remote Redhat Enterprise Linux 7 / 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:2440 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private clo...

kubernetes kubeadm-ha-setup kubernetes-cni kubernetes-cni-plugins security update

kubernetes 1.12.10-1.0.12 - CVE-2020-10749: IPv4 only clusters susceptible to MitM attacks via IPv6 rogue router advertisements - CVE-2020-8555: Half-Blind SSRF in kube-controller-manager kubeadm-ha-setup 0.0.2-1.0.70 - Enhance image tag read to depend on kubeadm-registry.sh for CVE release...

DEBIAN-CVE-2020-8555

The Kubernetes kube-controller-manager in versions v1.0-1.14, versions prior to v1.15.12, v1.16.9, v1.17.5, and version v1.18.0 are vulnerable to a Server Side Request Forgery SSRF that allows certain authorized users to leak up to 500 bytes of arbitrary information from unprotected endpoints...

CVE-2020-8555

CVE-2020-8555 (Kubernetes) : A SSRF in kube-controller-manager allows certain authorized users to leak up to 500 bytes from unprotected endpoints inside the master’s host network (e.g., link-local or loopback). Affected releases include Kubernetes kube-controller-manager versions v1.0–v1.14, and ...

Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes controller manager security vulnerability (CVE-2020-8555)

Summary IBM Cloud Kubernetes Service is affected by a security vulnerability in the Kubernetes controller manager that could leak data to authorized users CVE-2020-8555 Vulnerability Details CVEID: CVE-2020-8555 DESCRIPTION: There exists a Server Side Request Forgery SSRF vulnerability in...

CVE-2020-8555

creationtimestamp| type| source ---|---|--- 2020-06-02 13:13:22+00:00| seen| https://t.me/k8security/65 2020-07-22 07:09:48+00:00| seen| https://t.me/k8security/88 2022-02-01 14:42:39+00:00| seen| https://t.me/VulnerabilityNews/26410 2024-10-28 14:37:49+00:00| published-proof-of-concept|...

CVE-2020-8555

A server side request forgery SSRF flaw was found in Kubernetes. The kube-controller-manager allows authorized users with the ability to create StorageClasses or certain Volume types to leak up to 500 bytes of arbitrary information from the master's host network. This can include secrets from the...

CVE-2019-8555

CVE-2019-8555 corresponds to a buffer overflow in AppleGraphicsControl. The vulnerability could allow a malicious application to execute arbitrary code with kernel privileges due to insufficient size validation. Apple’s advisory for macOS Mojave 10.14.4 and the Apple security content entry (CVE-2...

Remote Code Execution (RCE)

Microsoft Chakracore is vulnerable to remote code execution. It is possible due to a flaw in GetEnvironmentOperand in IRBuilder.cpp This CVE ID is different from CVE-2018-8541, CVE-2018-8542, CVE-2018-8551, CVE-2018-8555, CVE-2018-8556, CVE-2018-8557, CVE-2018-8588...

CVE-2018-8555

creationtimestamp| type| source ---|---|--- 2018-11-14 17:39:00+00:00| seen| MISP/5bec5b59-b2b0-4506-9c63-32a40a021402...

Remote code execution

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542,...

Remote code execution

A remote code execution vulnerability exists in the way that the Chakra scripting engine handles objects in memory in Microsoft Edge, aka "Chakra Scripting Engine Memory Corruption Vulnerability." This affects Microsoft Edge, ChakraCore. This CVE ID is unique from CVE-2018-8541, CVE-2018-8542,...

CVE-2018-8555

Technical details for CVE-2018-8555 are not publicly available in the provided documents. Monitor for updates and follow the disclosure pages for concrete affected components, root cause, and fixes.

Microsoft Patch Tuesday — November 2018: Vulnerability disclosures and Snort coverage

Microsoft released its monthly security update today, disclosing a variety of vulnerabilities in several of its products. The latest Patch Tuesday covers 53 vulnerabilities, 11 of which are rated "critical," 40 that are rated "important” and one “moderate” and “low” vulnerability, each. The...

Microsoft Chakra Scripting Engine Memory Corruption (CVE-2018-8555)

A memory corruption vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Security feature bypass

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page with malicious content when Microsoft Edge does not properly enforce same-origin policies, aka "Microsoft Edge Security Feature Bypass Vulnerability"...

Security feature bypass

Microsoft Edge in Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allows an attacker to trick a user into loading a page with malicious content when Microsoft Edge fails to correctly apply Same Origin Policy for HTML elements present in other browser windows, aka "Microso...

CVE-2017-8555

CVE-2017-8555 describes a vulnerability in Microsoft Edge on Windows 10 (1703) where the Content Security Policy (CSP) fails to properly validate certain crafted documents, enabling an attacker to trick a user into loading a page with malicious content. The issue is tied to Edge’s handling of CSP...

CVE-2017-8555

Microsoft Edge in Microsoft Windows 10 1703 allows an attacker to trick a user into loading a page with malicious content when the Edge Content Security Policy CSP fails to properly validate certain specially crafted documents, aka "Microsoft Edge Security Feature Bypass Vulnerability". This CVE ...

Microsoft Windows Multiple Vulnerabilities (KB4022725)

This host is missing a critical security update according to Microsoft KB4022725 SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...