# CVE-2020-8554: kata: kubernetes [1.18.10-3] - Kata CVE-2020-28914  kata-proxy [1.11.5-1] - Added Oracle Specific Build Files for kata-prox...

CVE-2020-8554 is fixed in 17 products on 1 platform, first by ELSA-2021-9028, released February 10, 2021. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2020-8554
- Priority: Routine
- CVSS: 5.0 (IMPORTANT)
- EPSS: 0.0872
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Feb 10, 2021

## Description

kubernetes [1.18.10-3] - Kata CVE-2020-28914  kata-proxy [1.11.5-1] - Added Oracle Specific Build Files for kata-proxy  kata-shim [1.11.5-1] - Added Oracle Specific Build Files for kata-shim  kata-ksm-throttler [1.11.5-1] - Added Oracle Specific Build Files for kata-ksm-throttler  kata-runtime [1.11.5-1] - Added Oracle Specific Files For kata-runtime  kata-agent [1.11.5-1] - Added Oracle Specific Build Files for kata-agent  kata-image [1.11.5-1] - Added Oracle Specific Build Files for kata-image  kata [1.11.5-2] - Update to kata 1.11.5  olcne [1.2.2-1] - Address CVE-2020-28914: An improper file permissions vulnerability affects Kata Containers prior to 1.11.5  [1.2.1-1] - Enhance the Kubernetes module to restrict the usage of external IPs - Address CVE-2020-8554: man-in-the-middle vulnerability using Kubernetes service External IPs  [1.2.0-4] - Add support for deprecating module args

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Linux | kata ol 8 | 0:1.11.5-2.el8 | [ELSA-2021-9028](https://patchblox.com/security/data/fix/linux/elsa-2021-9028.md) | Feb 10, 2021 |
| Linux | kata-agent ol 8 | 0:1.11.5-1.el8 | [ELSA-2021-9028](https://patchblox.com/security/data/fix/linux/elsa-2021-9028.md) | Feb 10, 2021 |
| Linux | kata-image ol 8 | 0:1.11.5-1.1.ol8_202101151826 | [ELSA-2021-9028](https://patchblox.com/security/data/fix/linux/elsa-2021-9028.md) | Feb 10, 2021 |
| Linux | kata-ksm-throttler ol 8 | 0:1.11.5-1.el8 | [ELSA-2021-9028](https://patchblox.com/security/data/fix/linux/elsa-2021-9028.md) | Feb 10, 2021 |
| Linux | kata-proxy ol 8 | 0:1.11.5-1.el8 | [ELSA-2021-9028](https://patchblox.com/security/data/fix/linux/elsa-2021-9028.md) | Feb 10, 2021 |
| Linux | kata-runtime ol 8 | 0:1.11.5-1.el8 | [ELSA-2021-9028](https://patchblox.com/security/data/fix/linux/elsa-2021-9028.md) | Feb 10, 2021 |
| Linux | kata-shim ol 8 | 0:1.11.5-1.el8 | [ELSA-2021-9028](https://patchblox.com/security/data/fix/linux/elsa-2021-9028.md) | Feb 10, 2021 |
| Linux | kubeadm ol 8 | 0:1.18.10-3.el8 | [ELSA-2021-9028](https://patchblox.com/security/data/fix/linux/elsa-2021-9028.md) | Feb 10, 2021 |
| Linux | kubectl ol 8 | 0:1.18.10-3.el8 | [ELSA-2021-9028](https://patchblox.com/security/data/fix/linux/elsa-2021-9028.md) | Feb 10, 2021 |
| Linux | kubelet ol 8 | 0:1.18.10-3.el8 | [ELSA-2021-9028](https://patchblox.com/security/data/fix/linux/elsa-2021-9028.md) | Feb 10, 2021 |
| Linux | olcne-agent ol 8 | 0:1.2.2-1.el8 | [ELSA-2021-9028](https://patchblox.com/security/data/fix/linux/elsa-2021-9028.md) | Feb 10, 2021 |
| Linux | olcne-api-server ol 8 | 0:1.2.2-1.el8 | [ELSA-2021-9028](https://patchblox.com/security/data/fix/linux/elsa-2021-9028.md) | Feb 10, 2021 |
| Linux | olcne-istio-chart ol 8 | 0:1.2.2-1.el8 | [ELSA-2021-9028](https://patchblox.com/security/data/fix/linux/elsa-2021-9028.md) | Feb 10, 2021 |
| Linux | olcne-nginx ol 8 | 0:1.2.2-1.el8 | [ELSA-2021-9028](https://patchblox.com/security/data/fix/linux/elsa-2021-9028.md) | Feb 10, 2021 |
| Linux | olcne-prometheus-chart ol 8 | 0:1.2.2-1.el8 | [ELSA-2021-9028](https://patchblox.com/security/data/fix/linux/elsa-2021-9028.md) | Feb 10, 2021 |
| Linux | olcne-utils ol 8 | 0:1.2.2-1.el8 | [ELSA-2021-9028](https://patchblox.com/security/data/fix/linux/elsa-2021-9028.md) | Feb 10, 2021 |
| Linux | olcnectl ol 8 | 0:1.2.2-1.el8 | [ELSA-2021-9028](https://patchblox.com/security/data/fix/linux/elsa-2021-9028.md) | Feb 10, 2021 |

---

Data as of 2026-11-07T18:46:35Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo

Free to use with attribution: show "Data: Patchblox Patch Radar" with a link to https://patchblox.com/security/patch-radar. Terms, including what needs a written agreement: https://patchblox.com/security/patch-radar/use-the-data

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.