Patchwire CVEs, their patch status, and feeds to follow them

CVE-2016-7075

Fixed in a distro release EPSS 2%CVSS 7.5

It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 client intermediate certificate host name fields. An attacker could use this flaw to bypass authentication requirements by using a specially crafted X.509 certificate.

Published 2018-09-10 · CVE record · OSV

Products: Red Hat OpenShift

Distro releases

ReleasePackageFixed in
Chainguardkube-apiserver-1.280
Chainguardkube-apiserver-1.28-default0
Chainguardkube-apiserver-1.290
Chainguardkube-apiserver-1.29-default0
Chainguardkube-apiserver-1.300
Chainguardkube-apiserver-1.30-default0
Chainguardkube-apiserver-1.310
Chainguardkube-apiserver-1.31-default0
Chainguardkube-controller-manager-1.280
Chainguardkube-controller-manager-1.28-default0
Chainguardkube-controller-manager-1.290
Chainguardkube-controller-manager-1.29-default0
Chainguardkube-controller-manager-1.300
Chainguardkube-controller-manager-1.30-default0
Chainguardkube-controller-manager-1.310
Chainguardkube-controller-manager-1.31-default0
Chainguardkube-proxy-1.280
Chainguardkube-proxy-1.28-default0
Chainguardkube-proxy-1.290
Chainguardkube-proxy-1.29-default0
Chainguardkube-proxy-1.29-default-compat0
Chainguardkube-proxy-1.300
Chainguardkube-proxy-1.30-default0
Chainguardkube-proxy-1.30-default-compat0
Chainguardkube-proxy-1.310
Chainguardkube-proxy-1.31-default0
Chainguardkube-proxy-1.31-default-compat0
Chainguardkube-scheduler-1.280
Chainguardkube-scheduler-1.28-default0
Chainguardkube-scheduler-1.290
Chainguardkube-scheduler-1.29-default0
Chainguardkube-scheduler-1.300
Chainguardkube-scheduler-1.30-default0
Chainguardkube-scheduler-1.310
Chainguardkube-scheduler-1.31-default0
Chainguardkubeadm-1.280
Chainguardkubeadm-1.28-default0
Chainguardkubeadm-1.290
Chainguardkubeadm-1.29-default0
Chainguardkubeadm-1.300
Chainguardkubeadm-1.30-default0
Chainguardkubeadm-1.310
Chainguardkubeadm-1.31-default0
Chainguardkubectl-1.280
Chainguardkubectl-1.28-default0
Chainguardkubectl-1.290
Chainguardkubectl-1.29-bitnami-compat0
Chainguardkubectl-1.29-default0
Chainguardkubectl-1.300
Chainguardkubectl-1.30-bitnami-compat0
Chainguardkubectl-1.30-default0
Chainguardkubectl-1.310
Chainguardkubectl-1.31-bitnami-compat0
Chainguardkubectl-1.31-default0
Chainguardkubectl-bash-completion-1.280
Chainguardkubectl-bash-completion-1.290
Chainguardkubectl-bash-completion-1.300
Chainguardkubectl-bash-completion-1.310
Chainguardkubelet-1.280
Chainguardkubelet-1.28-default0
Chainguardkubelet-1.290
Chainguardkubelet-1.29-default0
Chainguardkubelet-1.300
Chainguardkubelet-1.30-default0
Chainguardkubelet-1.310
Chainguardkubelet-1.31-default0
Chainguardkubernetes-1.190
Chainguardkubernetes-1.200
Chainguardkubernetes-1.210
Chainguardkubernetes-1.220
Chainguardkubernetes-1.230
Chainguardkubernetes-1.240
Chainguardkubernetes-1.250
Chainguardkubernetes-1.260
Chainguardkubernetes-1.270
Chainguardkubernetes-1.280
Chainguardkubernetes-1.28-default0
Chainguardkubernetes-1.290
Chainguardkubernetes-1.29-default0
Chainguardkubernetes-1.300
Chainguardkubernetes-1.30-default0
Chainguardkubernetes-1.310
Chainguardkubernetes-1.31-default0
Chainguardkubernetes-1.320
Chainguardkubernetes-1.33no fix
Chainguardkubernetes-1.34no fix
Chainguardkubernetes-1.35no fix
Chainguardkubernetes-1.36no fix
Chainguardkubernetes-1.37no fix
Chainguardkubernetes-pause-1.290
Chainguardkubernetes-pause-1.300
Chainguardkubernetes-pause-1.310
Chainguardkubernetes-pause-compat-1.290
Chainguardkubernetes-pause-compat-1.300
Chainguardkubernetes-pause-compat-1.310
Debian 12kubernetes1.5.5+dfsg-1
Debian 13kubernetes1.5.5+dfsg-1
Debian 14kubernetes1.5.5+dfsg-1
Red Hat openshift 3.1atomic-openshift0:3.1.1.8-1.git.0.d469026.el7aos
Red Hat openshift 3.1atomic-openshift-clients0:3.1.1.8-1.git.0.d469026.el7aos
Red Hat openshift 3.1atomic-openshift-clients-redistributable0:3.1.1.8-1.git.0.d469026.el7aos
Red Hat openshift 3.1atomic-openshift-dockerregistry0:3.1.1.8-1.git.0.d469026.el7aos
Red Hat openshift 3.1atomic-openshift-master0:3.1.1.8-1.git.0.d469026.el7aos
Red Hat openshift 3.1atomic-openshift-node0:3.1.1.8-1.git.0.d469026.el7aos
Red Hat openshift 3.1atomic-openshift-pod0:3.1.1.8-1.git.0.d469026.el7aos
Red Hat openshift 3.1atomic-openshift-recycle0:3.1.1.8-1.git.0.d469026.el7aos
Red Hat openshift 3.1atomic-openshift-sdn-ovs0:3.1.1.8-1.git.0.d469026.el7aos
Red Hat openshift 3.1tuned-profiles-atomic-openshift-node0:3.1.1.8-1.git.0.d469026.el7aos
Red Hat openshift 3.2atomic-openshift0:3.2.1.17-1.git.0.6d01b60.el7
Red Hat openshift 3.2atomic-openshift-clients0:3.2.1.17-1.git.0.6d01b60.el7
Red Hat openshift 3.2atomic-openshift-clients-redistributable0:3.2.1.17-1.git.0.6d01b60.el7
Red Hat openshift 3.2atomic-openshift-dockerregistry0:3.2.1.17-1.git.0.6d01b60.el7
Red Hat openshift 3.2atomic-openshift-master0:3.2.1.17-1.git.0.6d01b60.el7
Red Hat openshift 3.2atomic-openshift-node0:3.2.1.17-1.git.0.6d01b60.el7
Red Hat openshift 3.2atomic-openshift-pod0:3.2.1.17-1.git.0.6d01b60.el7
Red Hat openshift 3.2atomic-openshift-recycle0:3.2.1.17-1.git.0.6d01b60.el7
Red Hat openshift 3.2atomic-openshift-sdn-ovs0:3.2.1.17-1.git.0.6d01b60.el7
Red Hat openshift 3.2atomic-openshift-tests0:3.2.1.17-1.git.0.6d01b60.el7
Red Hat openshift 3.2tuned-profiles-atomic-openshift-node0:3.2.1.17-1.git.0.6d01b60.el7
Red Hat openshift 3.3atomic-openshift0:3.3.0.35-1.git.0.d7bd9b6.el7
Red Hat openshift 3.3atomic-openshift-clients0:3.3.0.35-1.git.0.d7bd9b6.el7
Red Hat openshift 3.3atomic-openshift-clients-redistributable0:3.3.0.35-1.git.0.d7bd9b6.el7
Red Hat openshift 3.3atomic-openshift-dockerregistry0:3.3.0.35-1.git.0.d7bd9b6.el7
Red Hat openshift 3.3atomic-openshift-master0:3.3.0.35-1.git.0.d7bd9b6.el7
Red Hat openshift 3.3atomic-openshift-node0:3.3.0.35-1.git.0.d7bd9b6.el7
Red Hat openshift 3.3atomic-openshift-pod0:3.3.0.35-1.git.0.d7bd9b6.el7
Red Hat openshift 3.3atomic-openshift-sdn-ovs0:3.3.0.35-1.git.0.d7bd9b6.el7
Red Hat openshift 3.3atomic-openshift-tests0:3.3.0.35-1.git.0.d7bd9b6.el7
Red Hat openshift 3.3tuned-profiles-atomic-openshift-node0:3.3.0.35-1.git.0.d7bd9b6.el7
Ubuntu 22.04 LTSkubernetesno fix
Ubuntu 24.04 LTSkubernetesno fix
Ubuntu Pro 20.04 LTSkubernetesno fix
Wolfikube-apiserver-1.280
Wolfikube-apiserver-1.28-default0
Wolfikube-controller-manager-1.280
Wolfikube-controller-manager-1.28-default0
Wolfikube-proxy-1.280
Wolfikube-proxy-1.28-default0
Wolfikube-scheduler-1.280
Wolfikube-scheduler-1.28-default0
Wolfikubeadm-1.280
Wolfikubeadm-1.28-default0
Wolfikubectl-1.280
Wolfikubectl-1.28-default0
Wolfikubectl-bash-completion-1.280
Wolfikubelet-1.280
Wolfikubelet-1.28-default0
Wolfikubernetes-1.260
Wolfikubernetes-1.270
Wolfikubernetes-1.280
Wolfikubernetes-1.28-default0
Wolfikubernetes-1.34no fix
Wolfikubernetes-1.35no fix
Wolfikubernetes-1.36no fix
Wolfikubernetes-1.37no fix