This page tracks the Debian fix status. The vulnerability itself is described on the main CVE page.
View CVE-2020-8566 →
DEBIAN-CVE-2020-8566
In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs. This...
Original description
The description as published by the source.
In Kubernetes clusters using Ceph RBD as a storage provisioner, with logging level of at least 4, Ceph RBD admin secrets can be written to logs. This occurs in kube-controller-manager's logs during provisioning of Ceph RBD persistent claims. This affects < v1.19.3, < v1.18.10, < v1.17.13.
Source: OSV.dev (Open Source Vulnerabilities) OSV
Affected packages
Debian:12
kubernetes
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-1"}]}]
Debian:13
kubernetes
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-1"}]}]
Debian:14
kubernetes
[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.19.3-1"}]}]
References
- advisory security-tracker.debian.org