StackRadar

CVE-2020-8559

Medium

Advisory

Published 24 Apr 2024In the index since 5 Sept 2026
Severity
Medium
worst across findings
CVSS
6.8
base score, highest
EPSS
0.061
93rd percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
263
of 17,781 indexed, latest versions
Container images
237
deployed by those charts
Fix available
2 of 2
affected packages

Privilege Escalation in Kubernetes

Carried by container images the latest versions of 263 of 17,781 indexed charts deploy, on 237 images.

Affected packageAffected versionsFixed inImages
k8s.io/apimachinerygolangv0.0.0-20170513172009-9603df80256c, v0.0.0-20180515182440-31dade610c05, v0.0.0-20180621070125-103fd098999d, v0.0.0-20181127025237-2b1284ed4c93+43 more0.16.13, 0.17.9, 0.18.7178
k8s.io/kubernetesgolangv0.0.0-20240417172702-7c48c2bd72b9, v0.0.0-20240514104202-6911225c3f74, v0.0.0-20240611201126-f25b321b9ae4, v0.0.0-20240611201706-062798d53d83+37 more1.16.13, 1.17.9, 1.18.774
OSV records
GHSA-33c5-9fx5-fvjm
Also known as
GO-2024-2748

Charts affected

263 by stars
ChartLatestAffected imagesRadar Score
verhuis-serviceverhuis-service1.0.01 of 3See more

verhuis-service verhuis-service 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verhuis-service-php:latest66bbaf95a123
k8s.io/apimachinery@v0.18.0
0.18.7

Open the chart page →

7,510
verzoekconversieserviceverzoekconversieservice1.0.01 of 3See more

verzoekconversieservice verzoekconversieservice 1.0.0

1 of the 3 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekconversieservice-php:lateste918014fb8d3
k8s.io/apimachinery@v0.18.0
0.18.7

Open the chart page →

7,528
verzoekregistratiecomponentverzoekregistratiecomponent1.1.01 of 4See more

verzoekregistratiecomponent verzoekregistratiecomponent 1.1.0

1 of the 4 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoekregistratiecomponent-php:latestc4f6c03af5d3
k8s.io/apimachinery@v0.18.0
0.18.7

Open the chart page →

7,429
verzoektypecatalogusverzoektypecatalogus1.1.01 of 4See more

verzoektypecatalogus verzoektypecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/verzoektypecatalogus-php:latest64f5eb7a398b
k8s.io/apimachinery@v0.18.0
0.18.7

Open the chart page →

7,429
wazuhwazuh-helm-eksVerified publisher1.2.101 of 6See more

wazuh wazuh-helm-eks 1.2.10

1 of the 6 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
wazuh/wazuh-manager:4.14.45a065930682d
k8s.io/apimachinery@v0.18.3
0.18.7

Open the chart page →

5,484
wazuh-manager-filebeatwazuh-manager-filebeat0.1.0-gamma1 of 1See more

wazuh-manager-filebeat wazuh-manager-filebeat 0.1.0-gamma

1 of the 1 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
iosifache/wazuh-manager-filebeat:latest85df3f04b5da
k8s.io/apimachinery@v0.18.3
0.18.7

Open the chart page →

11,119
azure-scheduledevents-managerwebdevopsVerified publisher1.0.171 of 1See more

azure-scheduledevents-manager webdevops 1.0.17

1 of the 1 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
webdevops/azure-scheduledevents-manager:24.9.0-kubernetes7acd46a8a972
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.16.13

Open the chart page →

1,122
webresourcecataloguswebresourcecatalogus1.1.01 of 4See more

webresourcecatalogus webresourcecatalogus 1.1.0

1 of the 4 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
ghcr.io/conductionnl/webresourcecatalogus-php:latest8f1bbd5cda85
k8s.io/apimachinery@v0.18.0
0.18.7

Open the chart page →

7,552
nfs-subdir-external-provisionerwenerme4.0.181 of 1See more

nfs-subdir-external-provisioner wenerme 4.0.18

1 of the 1 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
k8s.io/apimachinery@v0.18.2-beta.0
k8s.io/kubernetes@v1.18.0
0.18.7
1.18.7

Open the chart page →

2,743
temporalwenerme0.15.11 of 13See more

temporal wenerme 0.15.1

1 of the 13 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
prom/prometheus:v2.16.0e4ca62c0d62f
k8s.io/apimachinery@v0.0.0-20190809020650-423f5d784010
0.16.13

Open the chart page →

22,665
traefikwenerme9.1.11 of 1See more

traefik wenerme 9.1.1

1 of the 1 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
library/traefik:2.2.8f5af5a5ce17f
k8s.io/apimachinery@v0.17.3
0.17.9

Open the chart page →

3,369
xkopsxkops0.1.01 of 5See more

xkops xkops 0.1.0

1 of the 5 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
murtazashah46/helmfile:latest4d11726cf803
k8s.io/kubernetes@v0.0.0-20241022202812-5864a4677267
1.16.13

Open the chart page →

13,677
zahori-consulzahoriVerified publisher1.0.11 of 2See more

zahori-consul zahori 1.0.1

1 of the 2 container images this version deploys carry CVE-2020-8559.

Container imageDigestPackageFixed in
hashicorp/consul:1.15.3ddff34041c5c
k8s.io/apimachinery@v0.18.2
0.18.7

Open the chart page →

5,033

Container images carrying it

237 by charts deploying them

A fixed version is listed for 2 of the 2 affected packages.

Container imageDigestPackageFixed inUsed by
clastix/kubectl:v1.3122918a06c253
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.16.13
6
prom/prometheus:v2.13.10a8caa2e9f19
k8s.io/apimachinery@v0.0.0-20190809020650-423f5d784010
0.16.13
5
quay.io/k8scsi/csi-node-driver-registrar:v1.3.0e6df72478956
k8s.io/kubernetes@v1.11.0-beta.2
1.16.13
5
argoproj/argocd:v1.8.1830e86cacefd
k8s.io/apimachinery@v0.17.3
0.17.9
3
prom/prometheus:v2.19.0bfad037f95e5
k8s.io/apimachinery@v0.18.3
0.18.7
3
stakater/proxyinjector:v0.0.2383fef483d497
k8s.io/apimachinery@v0.0.0-20191004115801-a2eda9f80ab8
0.16.13
3
quay.io/devtron/ai-agent:0.0.16545dac92173
k8s.io/kubernetes@v0.0.0-20241022202705-f0c1ea863533
1.16.13
3
quay.io/kubernetes_incubator/nfs-provisioner:v2.3.0f402e6039b3c
k8s.io/apimachinery@v0.0.0-20190814100815-533d101be9a6
0.16.13
3
quay.io/sighup/permission-manager:v1.7.1-rc1f5e6a5dcee33
k8s.io/apimachinery@v0.18.4
0.18.7
3
registry.k8s.io/kubectl:v1.31.099b37df34bc4
k8s.io/kubernetes@v0.0.0-20240813072848-9edcffcde559
1.16.13
3
registry.k8s.io/sig-storage/nfs-provisioner:v4.0.8c825f3d5e28b
k8s.io/apimachinery@v0.0.0-20190814100815-533d101be9a6
0.16.13
3
chankh/k8s-cloudwatch-adapter:v0.9.0963c44c7f8b1
k8s.io/apimachinery@v0.17.7
0.17.9
2
csiplugin/csi-qingcloud:v1.4.00766163dc046
k8s.io/apimachinery@v0.0.0-20190823012420-8ca64af22337
k8s.io/kubernetes@v1.14.1
0.16.13
1.16.13
2
grafana/loki:1.5.0922b3f412fdd
k8s.io/apimachinery@v0.0.0-20191115015347-3c7067801da2
0.16.13
2
grafana/promtail:1.5.046e88d390cd6
k8s.io/apimachinery@v0.0.0-20191115015347-3c7067801da2
0.16.13
2
hashicorp/consul:1.14.2e38576edcdfd
k8s.io/apimachinery@v0.18.2
0.18.7
2
hashicorp/vault:1.8.34db614d40d0e
k8s.io/apimachinery@v0.18.2
0.18.7
2
honestica/kube-iptables-tailer:master-91a393242fb939
k8s.io/apimachinery@v0.18.0
0.18.7
2
iomesh/hostpath-provisioner:v0.5.1f4878c8ae53a
k8s.io/apimachinery@v0.18.6
0.18.7
2
jettech/kube-webhook-certgen:v1.2.1c42098c8d855
k8s.io/apimachinery@v0.0.0-20190221213512-86fb29eff628
0.16.13
2
phntom/kochi:1.1.33b82358bd56e
k8s.io/apimachinery@v0.0.0-20180621070125-103fd098999d
0.16.13
2
prom/prometheus:v2.17.242d2395cd719
k8s.io/apimachinery@v0.17.3
0.17.9
2
thomasnyambati/labelsmanager-controller:1.0.0148ae3f99fea
k8s.io/apimachinery@v0.17.2
0.17.9
2
gcr.io/k8s-staging-sig-storage/nfs-provisioner:v3.0.02de1d15fc1f2
k8s.io/apimachinery@v0.0.0-20190814100815-533d101be9a6
0.16.13
2
ghcr.io/bryopsida/k8s-dev-pod:main82d0b161161d
k8s.io/kubernetes@v0.0.0-20250515091041-8f3800390d48
1.16.13
2
ghcr.io/grafana/helm-chart-toolbox-kubectl:0.1.1c137478627cc
k8s.io/kubernetes@v0.0.0-20250813142120-2e83bc4bf31e
1.16.13
2
quay.io/zncdatadev/tools:1.0.0-kubedoop0.0.0-dev382fca2054c9
k8s.io/kubernetes@v0.0.0-20240911212207-948afe5ca072
1.16.13
2
registry.k8s.io/kube-scheduler:v1.30.1474a5cf9cfa9f
k8s.io/kubernetes@v0.0.0-20250617182919-9e1848391882
1.16.13
2
registry.k8s.io/sig-storage/nfs-subdir-external-provisioner:v4.0.263d5e04551ec
k8s.io/apimachinery@v0.18.2-beta.0
k8s.io/kubernetes@v1.18.0
0.18.7
1.18.7
2
airbyte/pod-sweeper:1.5.198d2c39d512e
k8s.io/kubernetes@v0.0.0-20241210113726-a78aa47129b8
1.16.13
1
alpine/k8s:1.31.106dbe6f391eda
k8s.io/kubernetes@v0.0.0-20250617183334-61183587c03f
1.16.13
1
alpine/k8s:1.31.137a319b15cfc9
k8s.io/kubernetes@v0.0.0-20250909225156-c601ba40fa8f
1.16.13
1
alpine/k8s:1.32.47e1e7d5b7a96
k8s.io/kubernetes@v0.0.0-20250422155613-59526cd48674
1.16.13
1
alpine/k8s:1.31.49c4976d47656
k8s.io/kubernetes@v0.0.0-20241210113726-a78aa47129b8
1.16.13
1
alpine/k8s:1.18.16a41efe02a041
k8s.io/apimachinery@v0.16.8
0.16.13
1
alpine/k8s:1.30.0bd01dae02676
k8s.io/kubernetes@v0.0.0-20240417172702-7c48c2bd72b9
1.16.13
1
alpine/k8s:1.30.2cd560fce90f7
k8s.io/kubernetes@v0.0.0-20240611202059-39683505b630
1.16.13
1
alpine/k8s:1.28.13e5c0b053fed7
k8s.io/kubernetes@v0.0.0-20240814194418-024ab2a13ff7
1.16.13
1
alpine/k8s:1.32.3eec354133193
k8s.io/kubernetes@v0.0.0-20250311195220-32cc146f75aa
1.16.13
1
amazon/aws-efs-csi-driver:v0.3.0b55277652ea8
k8s.io/kubernetes@v1.16.1
1.16.13
1
amazon/aws-fsx-csi-driver:latestc9b14856fd22
k8s.io/apimachinery@v0.17.0
0.17.9
1
amazon/cloudwatch-agent:1.247350.0b251780e745d1783c93
k8s.io/apimachinery@v0.17.4
0.17.9
1
ansgroup/cert-manager-webhook-safedns:v1.0.1cd6b0ef2b309
k8s.io/apimachinery@v0.17.4
0.17.9
1
assistiot/cybersecurity-monitoring_id-wzh:latest0aacefac9677
k8s.io/apimachinery@v0.18.3
0.18.7
1
bitnamilegacy/kubectl:1.301249fc292e84
k8s.io/kubernetes@v0.0.0-20241119172634-0c76c645d5a6
1.16.13
1
bitnamilegacy/kubectl:1.3164614ef8290f
k8s.io/kubernetes@v0.0.0-20241210113726-a78aa47129b8
1.16.13
1
bitnamilegacy/kubectl:1.30.5744f84cf7493
k8s.io/kubernetes@v0.0.0-20240912001154-74e84a90c725
1.16.13
1
burganbank/vault-initializer:v19259c34e4037
k8s.io/kubernetes@v0.0.0-20240514104202-6911225c3f74
1.16.13
1
cbeneke/hcloud-fip-controller:v0.4.1dc658078d7ba
k8s.io/apimachinery@v0.18.2
0.18.7
1
cfcontainerization/cf-operator:v2.3.0-0.g27a91cdf82fa261c18a8
k8s.io/apimachinery@v0.0.0-20190913080033-27d36303b655
0.16.13
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.