CVE-2020-8559
MediumAdvisory
Published 24 Apr 2024In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.8
- base score, highest
- EPSS
- 0.061
- 93rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 263
- of 17,781 indexed, latest versions
- Container images
- 237
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Privilege Escalation in Kubernetes
Carried by container images the latest versions of 263 of 17,781 indexed charts deploy, on 237 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| k8s.io/ | v0.0.0-20170513172009-9603df80256c, v0.0.0-20180515182440-31dade610c05, v0.0.0-20180621070125-103fd098999d, v0.0.0-20181127025237-2b1284ed4c93+43 more | 0.16.13, 0.17.9, 0.18.7 | 178 |
| k8s.io/ | v0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+37 more | 1.16.13, 1.17.9, 1.18.7 | 74 |
- OSV records
- GHSA-33c5-9fx5-fvjm
- Also known as
- GO-2024-2748
Charts affected
263 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| verhuis-serviceverhuis-service | 1.0.0 | 1 of 3See more | 7,510 |
| verzoekconversieserviceverzoekconversieservice | 1.0.0 | 1 of 3See more | 7,528 |
| verzoekregistratiecomponentverzoekregistratiecomponent | 1.1.0 | 1 of 4See more | 7,429 |
| verzoektypecatalogusverzoektypecatalogus | 1.1.0 | 1 of 4See more | 7,429 |
| wazuhwazuh-helm-eksVerified publisher | 1.2.10 | 1 of 6See more | 5,484 |
| wazuh-manager-filebeatwazuh-manager-filebeat | 0.1.0-gamma | 1 of 1See more | 11,119 |
| azure-scheduledevents-managerwebdevopsVerified publisher | 1.0.17 | 1 of 1See more | 1,122 |
| webresourcecataloguswebresourcecatalogus | 1.1.0 | 1 of 4See more | 7,552 |
| nfs-subdir-external-provisionerwenerme | 4.0.18 | 1 of 1See more | 2,743 |
| temporalwenerme | 0.15.1 | 1 of 13See more | 22,665 |
| traefikwenerme | 9.1.1 | 1 of 1See more | 3,369 |
| xkopsxkops | 0.1.0 | 1 of 5See more | 13,677 |
| zahori-consulzahoriVerified publisher | 1.0.1 | 1 of 2See more | 5,033 |
Container images carrying it
237 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| cfcontainerization/ | 58fb1c173a46 | k8s.io/ | 0.16.13 | 1 |
| conduction/ | 9cfeeb6c7c20 | k8s.io/ | 0.18.7 | 1 |
| conduction/ | c36094a41369 | k8s.io/ | 0.18.7 | 1 |
| conduction/ | ece1ab544c57 | k8s.io/ | 0.18.7 | 1 |
| conduction/ | 25415534d245 | k8s.io/ | 0.18.7 | 1 |
| conduction/ | 3423845692c1 | k8s.io/ | 0.18.7 | 1 |
| conduction/ | 2744565516e8 | k8s.io/ | 0.18.7 | 1 |
| conduction/ | e1d4ad1e22a8 | k8s.io/ | 0.18.7 | 1 |
| conduction/ | b6f95c8ead7d | k8s.io/ | 0.18.7 | 1 |
| conduction/ | 8f177f9f8a7b | k8s.io/ | 0.18.7 | 1 |
| conduction/ | 24f03c57568f | k8s.io/ | 0.18.7 | 1 |
| containous/ | 587162516502 | k8s.io/ | 0.17.9 | 1 |
| coredns/ | 73ca82b4ce82 | k8s.io/ | 0.18.7 | 1 |
| crossplane/ | 66666e6963af | k8s.io/ | 0.18.7 | 1 |
| crossplane/ | 0112171c45e3 | k8s.io/ | 0.18.7 | 1 |
| crossplane/ | 07b8b410dc76 | k8s.io/ | 0.18.7 | 1 |
| crowdfox/ | 6fa7e8063d27 | k8s.io/ k8s.io/ | 0.16.13 1.16.13 | 1 |
| csiplugin/ | 1fa83d45417f | k8s.io/ k8s.io/ | 0.18.7 1.18.7 | 1 |
| datadog/ | 8f20e56b5311 | k8s.io/ | 1.16.13 | 1 |
| datadog/ | 17f08a860090 | k8s.io/ | 0.18.7 | 1 |
| datawire/ | f95ae710d75c | k8s.io/ | 0.16.13 | 1 |
| devspacecloud/ | 49c397413f7b | k8s.io/ | 0.17.9 | 1 |
| dserio83/ | 6b3d9115fee2 | k8s.io/ | 1.16.13 | 1 |
| gitlab/ | fd7e5dfb9f30 | k8s.io/ | 0.16.13 | 1 |
| hashicorp/ | ddff34041c5c | k8s.io/ | 0.18.7 | 1 |
| hashicorp/ | dfc3500beb0e | k8s.io/ | 0.18.7 | 1 |
| hashicorp/ | 5697b85bc69a | k8s.io/ | 0.16.13 | 1 |
| huangchengwu6904/ | 1b932f8221a9 | k8s.io/ | 0.18.7 | 1 |
| huzafach/ | 6e271d43ea48 | k8s.io/ | 1.16.13 | 1 |
| iosifache/ | 85df3f04b5da | k8s.io/ | 0.18.7 | 1 |
| itzg/ | bb552b59fb53 | k8s.io/ | 0.18.7 | 1 |
| jmferrer/ | 030f68ec6998 | k8s.io/ | 0.16.13 | 1 |
| joeelliott/ | b4acd14642d0 | k8s.io/ | 0.16.13 | 1 |
| keptncontrib/ | 29969dd547de | k8s.io/ | 0.17.9 | 1 |
| kubeflownotebookswg/ | 2060a2ede788 | k8s.io/ | 0.16.13 | 1 |
| kubeflownotebookswg/ | f226fb44db57 | k8s.io/ | 0.16.13 | 1 |
| kubemod/ | 1f8154f7e80c | k8s.io/ | 0.18.7 | 1 |
| kubemod/ | cadca39288ad | k8s.io/ | 0.18.7 | 1 |
| kubeoperator/ | be8f0d624640 | k8s.io/ | 0.18.7 | 1 |
| kubesphere/ | b87db3c57cb3 | k8s.io/ | 0.18.7 | 1 |
| kubesphere/ | 49b445b1b732 | k8s.io/ | 1.16.13 | 1 |
| kubesphere/ | b5b665c4672c | k8s.io/ | 0.18.7 | 1 |
| kubesphere/ | ed7311a0f9e4 | k8s.io/ | 0.18.7 | 1 |
| kubesphere/ | 8d1ed5ee1d2e | k8s.io/ | 0.18.7 | 1 |
| kudobuilder/ | 69072d979708 | k8s.io/ | 0.16.13 | 1 |
| layer5/ | 8c20a8a1d6a4 | k8s.io/ | 0.16.13 | 1 |
| leonardomulticloud/ | d119918900e8 | k8s.io/ | 1.16.13 | 1 |
| library/ | f5af5a5ce17f | k8s.io/ | 0.17.9 | 1 |
| mesosphere/ | 9f863160127b | k8s.io/ | 0.16.13 | 1 |
| mesosphere/ | c10011f866f2 | k8s.io/ | 0.16.13 | 1 |