coredns cri-o cri-tools etcd flannel kata kata-agent kata-image kata-ksm-throttler kata-proxy kata-runtime kata-shim kubernetes kubernetes-cni kubernetes-cni-plugins kubernetes-dashboard olcne yq security update

coredns 1.3.1-1.0.6 - Address CVE-2020-16845 1.3.1-1.0.5 - Fix image location cri-o 1.14.7-1.0.8 - Address CVE-2020-16845 cri-tools 1.14.0-1.0.6 - Address CVE-2020-16845 etcd 3.3.10-1.0.5 - Address CVE-2020-16845 3.3.10-1.0.4 - Fix image location flannel 0.10.0-2.1.12 - Address CVE-2020-16845...

Oracle Linux 7 : olcne / conmon / coredns / cri-o / cri-tools / etcd / flannel / grafana / helm / istio / kata / kata-agent / kata-image / kata-ksm-throttler / kata-proxy / kata-runtime / kata-shim / kubernetes / kubernetes-cni / kubernetes-cni-plugins / kubernetes-dashboard / prometheus / yq (ELSA-2020-5827)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-5827 advisory. - Address CVE-2020-16845 conmon - Address CVE-2020-16845 coredns - Address CVE-2020-16845 cri-o - Address CVE-2020-16845 cri-tools - Address CVE-2020-16845 -...

Basics of Keeping Kubernetes Clusters Secure Part 1

With Kubernetes’ popularity and high adoption rates, its security should always be prioritized. We provide vital tips and recommendations on keeping the master node, the API server, etcd, RBAC, and network policies secure...

Important Photon OS Security Update - PHSA-2020-0130

Updates of 'etcd', 'go' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2020-3.0-0130

Updates of 'etcd', 'go' packages of Photon OS have been released...

Photon OS 1.0: Etcd PHSA-2020-1.0-0313

An update of the etcd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-1.0-0313. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139696;...

Photon OS 3.0: Etcd PHSA-2020-3.0-0126

An update of the etcd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0126. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139698;...

Denial Of Service (DoS)

etcd is vulnerable to denial of service DoS. An attacker is allowed to include the gateway address as an endpoint, causing the endpoint to stuck in a loop of requesting itself until there are no more available file descriptors to accept connections on the gateway...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-1.0-0313

An update of 'httpd', 'etcd' packages of Photon OS has been released...

Critical Photon OS Security Update - PHSA-2020-0313

Updates of 'httpd', 'etcd' packages of Photon OS have been released...

Photon OS 2.0: Etcd PHSA-2020-2.0-0272

An update of the etcd package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0272. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid139608;...

CVE-2020-15115

A flaw was found in etcd, where it does not perform any password length validation, which allows for very short passwords, such as those with a length of one. This flaw allows an attacker to guess or brute-force users' passwords with little computational effort. The highest threat from this...

CVE-2020-15136

A flaw was found in etcd. The gateway TLS authentication is only applied to endpoints detected in DNS SRV records. When starting a gateway, TLS authentication will only be attempted on endpoints identified in DNS SRV records for a given domain, which occurs in the discoverEndpoints function. No...

CVE-2020-15106

A flaw was found In etcd, where a large slice causes panic in the decodeRecord method. The size of a record is stored in the length field of a WAL file, and no additional validation is performed on this data. Therefore, it is possible to forge an extremely large frame size that can unintentionall...

CVE-2020-15114

A flaw was found in etcd, where the etcd gateway is a simple TCP proxy that allows basic service discovery and access. However, it is possible to include the gateway address as an endpoint. This issue results in a denial of service since the endpoint can become stuck in a loop of requesting itsel...

CVE-2020-15112

A flaw was found in etcd, where it is possible to have an entry index greater than the number of entries in the ReadAll method in wal/wal.go. This can cause issues when WAL entries are being read during consensus, as an arbitrary etcd consensus participant can go down from a runtime panic when...

CVE-2020-15113

A flaw was found in etcd. Certain directory paths are created with restricted access permissions 700 by using the os.MkdirAll. This function does not perform any permission checks when a given directory path exists already...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2020-2.0-0272

An update of 'linux', 'etcd', 'linux-secure', 'linux-aws', 'linux-esx', 'httpd' packages of Photon OS has been released...

ETCD Resource Management Error Vulnerability

etcd is a key-value storage system for distributed systems written in the Go language. A resource management error vulnerability exists in etcd versions prior to 3.3.23 and 3.4.10. An attacker could exploit this vulnerability to cause a denial of service...

ETCD Authorization Issues Vulnerability

etcd is a key-value storage system for distributed systems written in the Go language. An authorization issue vulnerability exists in etcd versions prior to 3.4.10 and prior to 3.3.23. The vulnerability stems from a lack of authentication measures or insufficient authentication strength in a...