{
  "cveId": "CVE-2020-8554",
  "url": "https://patchblox.com/security/cve/CVE-2020-8554",
  "summary": "CVE-2020-8554 is fixed in 17 products on 1 platform, first by ELSA-2021-9028, released February 10, 2021. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "kata: kubernetes\n[1.18.10-3]\n- Kata CVE-2020-28914\n\nkata-proxy\n[1.11.5-1]\n- Added Oracle Specific Build Files for kata-prox...",
  "description": "kubernetes\n[1.18.10-3]\n- Kata CVE-2020-28914\n\nkata-proxy\n[1.11.5-1]\n- Added Oracle Specific Build Files for kata-proxy\n\nkata-shim\n[1.11.5-1]\n- Added Oracle Specific Build Files for kata-shim\n\nkata-ksm-throttler\n[1.11.5-1]\n- Added Oracle Specific Build Files for kata-ksm-throttler\n\nkata-runtime\n[1.11.5-1]\n- Added Oracle Specific Files For kata-runtime\n\nkata-agent\n[1.11.5-1]\n- Added Oracle Specific Build Files for kata-agent\n\nkata-image\n[1.11.5-1]\n- Added Oracle Specific Build Files for kata-image\n\nkata\n[1.11.5-2]\n- Update to kata 1.11.5\n\nolcne\n[1.2.2-1]\n- Address CVE-2020-28914: An improper file permissions vulnerability affects Kata Containers prior to 1.11.5\n\n[1.2.1-1]\n- Enhance the Kubernetes module to restrict the usage of external IPs\n- Address CVE-2020-8554: man-in-the-middle vulnerability using Kubernetes service External IPs\n\n[1.2.0-4]\n- Add support for deprecating module args",
  "published": "2021-02-10T00:00:00Z",
  "severity": "IMPORTANT",
  "cvss": 5,
  "epss": 0.08721,
  "epssPercentile": 0.95172,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "kata",
      "release": "ol 8",
      "fixedVersion": "0:1.11.5-2.el8",
      "fix": "ELSA-2021-9028",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9028",
      "released": "2021-02-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kata-agent",
      "release": "ol 8",
      "fixedVersion": "0:1.11.5-1.el8",
      "fix": "ELSA-2021-9028",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9028",
      "released": "2021-02-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kata-image",
      "release": "ol 8",
      "fixedVersion": "0:1.11.5-1.1.ol8_202101151826",
      "fix": "ELSA-2021-9028",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9028",
      "released": "2021-02-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kata-ksm-throttler",
      "release": "ol 8",
      "fixedVersion": "0:1.11.5-1.el8",
      "fix": "ELSA-2021-9028",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9028",
      "released": "2021-02-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kata-proxy",
      "release": "ol 8",
      "fixedVersion": "0:1.11.5-1.el8",
      "fix": "ELSA-2021-9028",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9028",
      "released": "2021-02-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kata-runtime",
      "release": "ol 8",
      "fixedVersion": "0:1.11.5-1.el8",
      "fix": "ELSA-2021-9028",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9028",
      "released": "2021-02-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kata-shim",
      "release": "ol 8",
      "fixedVersion": "0:1.11.5-1.el8",
      "fix": "ELSA-2021-9028",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9028",
      "released": "2021-02-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kubeadm",
      "release": "ol 8",
      "fixedVersion": "0:1.18.10-3.el8",
      "fix": "ELSA-2021-9028",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9028",
      "released": "2021-02-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kubectl",
      "release": "ol 8",
      "fixedVersion": "0:1.18.10-3.el8",
      "fix": "ELSA-2021-9028",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9028",
      "released": "2021-02-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "kubelet",
      "release": "ol 8",
      "fixedVersion": "0:1.18.10-3.el8",
      "fix": "ELSA-2021-9028",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9028",
      "released": "2021-02-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "olcne-agent",
      "release": "ol 8",
      "fixedVersion": "0:1.2.2-1.el8",
      "fix": "ELSA-2021-9028",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9028",
      "released": "2021-02-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "olcne-api-server",
      "release": "ol 8",
      "fixedVersion": "0:1.2.2-1.el8",
      "fix": "ELSA-2021-9028",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9028",
      "released": "2021-02-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "olcne-istio-chart",
      "release": "ol 8",
      "fixedVersion": "0:1.2.2-1.el8",
      "fix": "ELSA-2021-9028",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9028",
      "released": "2021-02-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "olcne-nginx",
      "release": "ol 8",
      "fixedVersion": "0:1.2.2-1.el8",
      "fix": "ELSA-2021-9028",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9028",
      "released": "2021-02-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "olcne-prometheus-chart",
      "release": "ol 8",
      "fixedVersion": "0:1.2.2-1.el8",
      "fix": "ELSA-2021-9028",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9028",
      "released": "2021-02-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "olcne-utils",
      "release": "ol 8",
      "fixedVersion": "0:1.2.2-1.el8",
      "fix": "ELSA-2021-9028",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9028",
      "released": "2021-02-10T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "olcnectl",
      "release": "ol 8",
      "fixedVersion": "0:1.2.2-1.el8",
      "fix": "ELSA-2021-9028",
      "url": "https://patchblox.com/security/fix/linux/elsa-2021-9028",
      "released": "2021-02-10T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}