High severity7.5NVD Advisory· Published Sep 10, 2018· Updated Jun 17, 2026

CVE-2016-7075

Description

It was found that Kubernetes as used by Openshift Enterprise 3 did not correctly validate X.509 client intermediate certificate host name fields. An attacker could use this flaw to bypass authentication requirements by using a specially crafted X.509 certificate.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

117

Red Hat/OpenShift Enterprisellm-fuzzy
osv-coords115 versions
pkg:apk/chainguard/kubeadm-1.28 pkg:apk/chainguard/kubeadm-1.28-default pkg:apk/chainguard/kubeadm-1.29 pkg:apk/chainguard/kubeadm-1.29-default pkg:apk/chainguard/kubeadm-1.30 pkg:apk/chainguard/kubeadm-1.30-default pkg:apk/chainguard/kubeadm-1.31 pkg:apk/chainguard/kubeadm-1.31-default pkg:apk/chainguard/kube-apiserver-1.28 pkg:apk/chainguard/kube-apiserver-1.28-default pkg:apk/chainguard/kube-apiserver-1.29 pkg:apk/chainguard/kube-apiserver-1.29-default pkg:apk/chainguard/kube-apiserver-1.30 pkg:apk/chainguard/kube-apiserver-1.30-default pkg:apk/chainguard/kube-apiserver-1.31 pkg:apk/chainguard/kube-apiserver-1.31-default pkg:apk/chainguard/kube-controller-manager-1.28 pkg:apk/chainguard/kube-controller-manager-1.28-default pkg:apk/chainguard/kube-controller-manager-1.29 pkg:apk/chainguard/kube-controller-manager-1.29-default pkg:apk/chainguard/kube-controller-manager-1.30 pkg:apk/chainguard/kube-controller-manager-1.30-default pkg:apk/chainguard/kube-controller-manager-1.31 pkg:apk/chainguard/kube-controller-manager-1.31-default pkg:apk/chainguard/kubectl-1.28 pkg:apk/chainguard/kubectl-1.28-default pkg:apk/chainguard/kubectl-1.29 pkg:apk/chainguard/kubectl-1.29-bitnami-compat pkg:apk/chainguard/kubectl-1.29-default pkg:apk/chainguard/kubectl-1.30 pkg:apk/chainguard/kubectl-1.30-bitnami-compat pkg:apk/chainguard/kubectl-1.30-default pkg:apk/chainguard/kubectl-1.31 pkg:apk/chainguard/kubectl-1.31-bitnami-compat pkg:apk/chainguard/kubectl-1.31-default pkg:apk/chainguard/kubectl-bash-completion-1.28 pkg:apk/chainguard/kubectl-bash-completion-1.29 pkg:apk/chainguard/kubectl-bash-completion-1.30 pkg:apk/chainguard/kubectl-bash-completion-1.31 pkg:apk/chainguard/kubelet-1.28 pkg:apk/chainguard/kubelet-1.28-default pkg:apk/chainguard/kubelet-1.29 pkg:apk/chainguard/kubelet-1.29-default pkg:apk/chainguard/kubelet-1.30 pkg:apk/chainguard/kubelet-1.30-default pkg:apk/chainguard/kubelet-1.31 pkg:apk/chainguard/kubelet-1.31-default pkg:apk/chainguard/kube-proxy-1.28 pkg:apk/chainguard/kube-proxy-1.28-default pkg:apk/chainguard/kube-proxy-1.29 pkg:apk/chainguard/kube-proxy-1.29-default pkg:apk/chainguard/kube-proxy-1.29-default-compat pkg:apk/chainguard/kube-proxy-1.30 pkg:apk/chainguard/kube-proxy-1.30-default pkg:apk/chainguard/kube-proxy-1.30-default-compat pkg:apk/chainguard/kube-proxy-1.31 pkg:apk/chainguard/kube-proxy-1.31-default pkg:apk/chainguard/kube-proxy-1.31-default-compat pkg:apk/chainguard/kubernetes-1.19 pkg:apk/chainguard/kubernetes-1.20 pkg:apk/chainguard/kubernetes-1.21 pkg:apk/chainguard/kubernetes-1.22 pkg:apk/chainguard/kubernetes-1.23 pkg:apk/chainguard/kubernetes-1.24 pkg:apk/chainguard/kubernetes-1.25 pkg:apk/chainguard/kubernetes-1.26 pkg:apk/chainguard/kubernetes-1.27 pkg:apk/chainguard/kubernetes-1.28 pkg:apk/chainguard/kubernetes-1.28-default pkg:apk/chainguard/kubernetes-1.29 pkg:apk/chainguard/kubernetes-1.29-default pkg:apk/chainguard/kubernetes-1.30 pkg:apk/chainguard/kubernetes-1.30-default pkg:apk/chainguard/kubernetes-1.31 pkg:apk/chainguard/kubernetes-1.31-default pkg:apk/chainguard/kubernetes-1.32 pkg:apk/chainguard/kubernetes-pause-1.29 pkg:apk/chainguard/kubernetes-pause-1.30 pkg:apk/chainguard/kubernetes-pause-1.31 pkg:apk/chainguard/kubernetes-pause-compat-1.29 pkg:apk/chainguard/kubernetes-pause-compat-1.30 pkg:apk/chainguard/kubernetes-pause-compat-1.31 pkg:apk/chainguard/kube-scheduler-1.28 pkg:apk/chainguard/kube-scheduler-1.28-default pkg:apk/chainguard/kube-scheduler-1.29 pkg:apk/chainguard/kube-scheduler-1.29-default pkg:apk/chainguard/kube-scheduler-1.30 pkg:apk/chainguard/kube-scheduler-1.30-default pkg:apk/chainguard/kube-scheduler-1.31 pkg:apk/chainguard/kube-scheduler-1.31-default pkg:apk/wolfi/kubeadm-1.28 pkg:apk/wolfi/kubeadm-1.28-default pkg:apk/wolfi/kube-apiserver-1.28 pkg:apk/wolfi/kube-apiserver-1.28-default pkg:apk/wolfi/kube-controller-manager-1.28 pkg:apk/wolfi/kube-controller-manager-1.28-default pkg:apk/wolfi/kubectl-1.28 pkg:apk/wolfi/kubectl-1.28-default pkg:apk/wolfi/kubectl-bash-completion-1.28 pkg:apk/wolfi/kubelet-1.28 pkg:apk/wolfi/kubelet-1.28-default pkg:apk/wolfi/kube-proxy-1.28 pkg:apk/wolfi/kube-proxy-1.28-default pkg:apk/wolfi/kubernetes-1.24 pkg:apk/wolfi/kubernetes-1.25 pkg:apk/wolfi/kubernetes-1.26 pkg:apk/wolfi/kubernetes-1.27 pkg:apk/wolfi/kubernetes-1.28 pkg:apk/wolfi/kubernetes-1.28-default pkg:apk/wolfi/kubernetes-1.29 pkg:apk/wolfi/kubernetes-1.30 pkg:apk/wolfi/kubernetes-1.31 pkg:apk/wolfi/kubernetes-1.32 pkg:apk/wolfi/kube-scheduler-1.28 pkg:apk/wolfi/kube-scheduler-1.28-default
< 0+ 114 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
Red Hat/Openshiftv5
Range: n/a

Patches

Vulnerability mechanics

References

github.com/kubernetes/kubernetes/issues/34517nvdExploitPatchThird Party Advisory
access.redhat.com/errata/RHSA-2016:2064nvdThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000