CVE-2020-8559
MediumAdvisory
Published 24 Apr 2024In the index since 5 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.8
- base score, highest
- EPSS
- 0.061
- 93rd percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 263
- of 17,781 indexed, latest versions
- Container images
- 237
- deployed by those charts
- Fix available
- 2 of 2
- affected packages
Privilege Escalation in Kubernetes
Carried by container images the latest versions of 263 of 17,781 indexed charts deploy, on 237 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| k8s.io/ | v0.0.0-20170513172009-9603df80256c, v0.0.0-20180515182440-31dade610c05, v0.0.0-20180621070125-103fd098999d, v0.0.0-20181127025237-2b1284ed4c93+43 more | 0.16.13, 0.17.9, 0.18.7 | 178 |
| k8s.io/ | v0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+37 more | 1.16.13, 1.17.9, 1.18.7 | 74 |
- OSV records
- GHSA-33c5-9fx5-fvjm
- Also known as
- GO-2024-2748
Charts affected
263 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| verhuis-serviceverhuis-service | 1.0.0 | 1 of 3See more | 7,510 |
| verzoekconversieserviceverzoekconversieservice | 1.0.0 | 1 of 3See more | 7,528 |
| verzoekregistratiecomponentverzoekregistratiecomponent | 1.1.0 | 1 of 4See more | 7,429 |
| verzoektypecatalogusverzoektypecatalogus | 1.1.0 | 1 of 4See more | 7,429 |
| wazuhwazuh-helm-eksVerified publisher | 1.2.10 | 1 of 6See more | 5,484 |
| wazuh-manager-filebeatwazuh-manager-filebeat | 0.1.0-gamma | 1 of 1See more | 11,119 |
| azure-scheduledevents-managerwebdevopsVerified publisher | 1.0.17 | 1 of 1See more | 1,122 |
| webresourcecataloguswebresourcecatalogus | 1.1.0 | 1 of 4See more | 7,552 |
| nfs-subdir-external-provisionerwenerme | 4.0.18 | 1 of 1See more | 2,743 |
| temporalwenerme | 0.15.1 | 1 of 13See more | 22,665 |
| traefikwenerme | 9.1.1 | 1 of 1See more | 3,369 |
| xkopsxkops | 0.1.0 | 1 of 5See more | 13,677 |
| zahori-consulzahoriVerified publisher | 1.0.1 | 1 of 2See more | 5,033 |
Container images carrying it
237 by charts deploying them
A fixed version is listed for 2 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| mesosphere/ | 5456581d7b76 | k8s.io/ | 0.16.13 | 1 |
| mpioperator/ | 3ccfa8d8b7bf | k8s.io/ | 0.16.13 | 1 |
| murtazashah46/ | 4d11726cf803 | k8s.io/ | 1.16.13 | 1 |
| nacos/ | a9c769301fa6 | k8s.io/ | 0.17.9 | 1 |
| netrisai/ | 44f60aa0d898 | k8s.io/ | 0.18.7 | 1 |
| olliai/ | a470d96525e4 | k8s.io/ | 0.17.9 | 1 |
| olliai/ | 5716f2a8bd4c | k8s.io/ | 0.17.9 | 1 |
| openebs/ | 4f41dd782761 | k8s.io/ | 1.17.9 | 1 |
| openpolicyagent/ | 77bc9bf3d163 | k8s.io/ | 1.16.13 | 1 |
| opsgenie/ | ecb246e4d260 | k8s.io/ | 0.16.13 | 1 |
| pnnlmiscscripts/ | 155131891741 | k8s.io/ k8s.io/ | 0.16.13 1.16.13 | 1 |
| prom/ | 5880ec936055 | k8s.io/ | 0.17.9 | 1 |
| prom/ | cd134bd4fca0 | k8s.io/ | 0.18.7 | 1 |
| prom/ | e4ca62c0d62f | k8s.io/ | 0.16.13 | 1 |
| rancher/ | 6d2cd61a338b | k8s.io/ k8s.io/ | 0.16.13 1.16.13 | 1 |
| rancher/ | c678c25d47c8 | k8s.io/ k8s.io/ | 0.16.13 1.16.13 | 1 |
| rancher/ | 42784bb38ed3 | k8s.io/ | 0.16.13 | 1 |
| rancher/ | 8eb8092f0728 | k8s.io/ k8s.io/ | 0.18.7 1.16.13 | 1 |
| rancher/ | d5999b20a1b1 | k8s.io/ | 0.17.9 | 1 |
| rancher/ | e34c88ae0aff | k8s.io/ | 0.17.9 | 1 |
| reportportal/ | 2b27a2d7a87d | k8s.io/ | 0.16.13 | 1 |
| runatlantis/ | 45fbaf7e207c | k8s.io/ | 0.16.13 | 1 |
| slamdev/ | 855f6625dda4 | k8s.io/ | 0.17.9 | 1 |
| slamdev/ | d5d6430108a3 | k8s.io/ | 0.18.7 | 1 |
| softonic/ | ab6098c04a53 | k8s.io/ | 0.18.7 | 1 |
| softonic/ | 72017aed5902 | k8s.io/ | 0.18.7 | 1 |
| softonic/ | 910f6de37763 | k8s.io/ | 0.18.7 | 1 |
| sorintlab/ | 36b45c0f97fc | k8s.io/ | 0.17.9 | 1 |
| sstarcher/ | 11769d01ba35 | k8s.io/ | 0.16.13 | 1 |
| sstarcher/ | 1f8cae8cfa80 | k8s.io/ | 0.16.13 | 1 |
| stakater/ | 39107924063e | k8s.io/ | 0.18.7 | 1 |
| thanosio/ | b12d5c31bf5a | k8s.io/ | 0.18.7 | 1 |
| toucansoftware/ | c187b1fba501 | k8s.io/ | 0.18.7 | 1 |
| veecode/ | c69fd286b489 | k8s.io/ | 1.16.13 | 1 |
| wazuh/ | 1da5c38c6a78 | k8s.io/ | 0.18.7 | 1 |
| wazuh/ | 21994f40e0da | k8s.io/ | 0.18.7 | 1 |
| wazuh/ | 5a065930682d | k8s.io/ | 0.18.7 | 1 |
| wazuh/ | f09282d281f6 | k8s.io/ | 0.18.7 | 1 |
| weaveworks/ | 174307de1b36 | k8s.io/ | 0.18.7 | 1 |
| weaveworks/ | a9c2e9df4227 | k8s.io/ | 0.16.13 | 1 |
| weaveworks/ | 3cdac6928a63 | k8s.io/ | 0.16.13 | 1 |
| webdevops/ | 7acd46a8a972 | k8s.io/ | 1.16.13 | 1 |
| zufardhiyaulhaq/ | a287ada277c6 | k8s.io/ | 0.18.7 | 1 |
| zufardhiyaulhaq/ | 306859a3f167 | k8s.io/ | 0.18.7 | 1 |
| gcr.io/ | a4011eae6a0b | k8s.io/ | 1.16.13 | 1 |
| gcr.io/ | 873b968f02b5 | k8s.io/ | 0.17.9 | 1 |
| gcr.io/ | a5de0fb75046 | k8s.io/ | 0.16.13 | 1 |
| gcr.io/ | 2ef460356b17 | k8s.io/ | 0.17.9 | 1 |
| gcr.io/ | 30ce73388ae5 | k8s.io/ | 0.17.9 | 1 |
| gcr.io/ | f16c0e022203 | k8s.io/ | 0.17.9 | 1 |