A flaw was found in the Restricted Security Context Constraints (SCC), where it allows pods to craft custom network packets. This flaw allows an attacker to cause a denial of service attack on an OpenShift Container Platform cluster if they can deploy pods. The highest threat from this vulnerability is to system availability.
Software | From | Fixed in |
---|---|---|
redhat / openshift_container_platform | 3.11 | 3.11.x |
redhat / openshift_container_platform | 4.5.16 | 4.5.16.x |
redhat / openshift_container_platform | 4.6 | 4.6.x |