CVE-2020-8551

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2020-8551
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-8551.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2020-8551
Aliases
Related
Published
2020-03-27T15:15:12Z
Modified
2025-02-14T11:19:14.613423Z
Downstream
Severity
  • 6.5 (Medium) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
[none]
Details

The Kubelet component in versions 1.15.0-1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via the kubelet API, including the unauthenticated HTTP read-only API typically served on port 10255, and the authenticated HTTPS API typically served on port 10250.

References

Affected packages

Debian:11 / kubernetes

Package

Name
kubernetes
Purl
pkg:deb/debian/kubernetes?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.17.4-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / kubernetes

Package

Name
kubernetes
Purl
pkg:deb/debian/kubernetes?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.17.4-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/kubernetes/kubelet

Affected ranges

Type
GIT
Repo
https://github.com/kubernetes/kubelet
Events
Introduced
f1cb295a73c9298232b9848aa1b4029e36fc91e5
Last affected
095c6bd056162bc90c3d4c9050b34a7265bba659
Introduced
f9974c2baa2d9ca25416d38e7ecfc7ff4d05d58e
Last affected
3d0d0a3a4b4425943a61f8843bbcf9483ef4845a
Introduced
250a1838aa2c492c9096ff86558515b8639d7e87
Last affected
9a74903985bd83003e2aeebffba9e08b8690db42
Type
GIT
Repo
https://github.com/kubernetes/kubernetes
Events
Introduced
e8462b5b5dc2584fdcd18e6bcfe9f1e4d970a529
Last affected
2e808b7cb054ee242b68e62455323aa783991f03
Introduced
70132b0f130acc0bed193d9ba59dd186f0e634cf
Last affected
59603c6e503c87169aea6106f57b9f242f64df89
Introduced
2bd9643cee5b3b3a5ecbd3af49d09018f0773c77
Last affected
72c30166b2105cd7d3350f2c28a219e6abcd79eb

Affected versions

v1.*

v1.15.0
v1.15.1
v1.15.1-beta.0
v1.15.2
v1.15.2-beta.0
v1.15.3
v1.15.3-beta.0
v1.15.4
v1.15.4-beta.0
v1.15.5
v1.15.5-beta.0
v1.15.6
v1.15.6-beta.0
v1.15.7
v1.15.7-beta.0
v1.15.8
v1.15.8-beta.0
v1.15.8-beta.1
v1.15.9
v1.15.9-beta.0
v1.16.0
v1.16.1
v1.16.1-beta.0
v1.16.2
v1.16.2-beta.0
v1.16.3
v1.16.3-beta.0
v1.16.4
v1.16.4-beta.0
v1.16.5
v1.16.5-beta.0
v1.16.5-beta.1
v1.16.6
v1.16.6-beta.0
v1.17.0
v1.17.1
v1.17.1-beta.0
v1.17.2
v1.17.2-beta.0