CVE-2020-8552

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-8552
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-8552.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2020-8552
Aliases
Downstream
Related
Published
2020-03-27T15:15:12.757Z
Modified
2026-06-18T03:55:25.222144048Z
Severity
  • 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L CVSS Calculator
Summary
[none]
Details

The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.

Database specific 
{
    "unresolved_ranges": [
        {
            "vendor_product": "fedoraproject:fedora",
            "extracted_events": [
                {
                    "last_affected": "32"
                }
            ],
            "source": "CPE_STRING",
            "cpes": [
                "cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*"
            ]
        }
    ]
}
References

Affected packages

Git / github.com/kubernetes/kubelet

Affected ranges

Type
GIT
Repo
https://github.com/kubernetes/kubelet
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
095c6bd056162bc90c3d4c9050b34a7265bba659
Introduced
250a1838aa2c492c9096ff86558515b8639d7e87
Last affected
9a74903985bd83003e2aeebffba9e08b8690db42
Introduced
f9974c2baa2d9ca25416d38e7ecfc7ff4d05d58e
Last affected
3d0d0a3a4b4425943a61f8843bbcf9483ef4845a
Database specific 
{
    "cpe": "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.15.9"
        },
        {
            "introduced": "1.16.0"
        },
        {
            "last_affected": "1.16.6"
        },
        {
            "introduced": "1.17.0"
        },
        {
            "last_affected": "1.17.2"
        }
    ]
}

Affected versions

kubernetes-1.*
kubernetes-1.10.0-alpha.0
kubernetes-1.10.0-alpha.1
kubernetes-1.10.0-alpha.2
kubernetes-1.10.0-alpha.3
kubernetes-1.11.0-alpha.0
kubernetes-1.11.0-alpha.1
kubernetes-1.11.0-alpha.2
kubernetes-1.12.0-alpha.0
kubernetes-1.12.0-alpha.1
kubernetes-1.12.0-beta.0
kubernetes-1.13.0-alpha.0
kubernetes-1.15.9
kubernetes-1.16.6
kubernetes-1.17.2
kubernetes-1.9.0-alpha.0
kubernetes-1.9.0-alpha.1
kubernetes-1.9.0-alpha.2
kubernetes-1.9.0-alpha.3
v0.*
v0.15.9
v0.16.6
v0.17.2

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-8552.json"

Git / github.com/kubernetes/kubernetes

Affected ranges

Type
GIT
Repo
https://github.com/kubernetes/kubernetes
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
2e808b7cb054ee242b68e62455323aa783991f03
Introduced
2bd9643cee5b3b3a5ecbd3af49d09018f0773c77
Last affected
72c30166b2105cd7d3350f2c28a219e6abcd79eb
Introduced
70132b0f130acc0bed193d9ba59dd186f0e634cf
Last affected
59603c6e503c87169aea6106f57b9f242f64df89
Database specific 
{
    "cpe": "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
    "source": "CPE_RANGE",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.15.9"
        },
        {
            "introduced": "1.16.0"
        },
        {
            "last_affected": "1.16.6"
        },
        {
            "introduced": "1.17.0"
        },
        {
            "last_affected": "1.17.2"
        }
    ]
}

Affected versions

v0.*
v0.13.1-dev
v0.17.0
v1.*
v1.1.0-alpha.0
v1.1.0-alpha.1
v1.10.0-alpha.0
v1.10.0-alpha.1
v1.10.0-alpha.2
v1.10.0-alpha.3
v1.11.0-alpha.0
v1.11.0-alpha.1
v1.11.0-alpha.2
v1.12.0-alpha.0
v1.12.0-alpha.1
v1.13.0-alpha.0
v1.13.0-alpha.1
v1.13.0-alpha.2
v1.13.0-alpha.3
v1.14.0-alpha.0
v1.14.0-alpha.1
v1.14.0-alpha.2
v1.14.0-alpha.3
v1.15.0
v1.15.0-alpha.0
v1.15.0-alpha.1
v1.15.0-alpha.2
v1.15.0-alpha.3
v1.15.0-beta.0
v1.15.0-beta.1
v1.15.0-beta.2
v1.15.0-rc.1
v1.15.1
v1.15.1-beta.0
v1.15.2
v1.15.2-beta.0
v1.15.3
v1.15.3-beta.0
v1.15.4
v1.15.4-beta.0
v1.15.5
v1.15.5-beta.0
v1.15.6
v1.15.6-beta.0
v1.15.7
v1.15.7-beta.0
v1.15.8
v1.15.8-beta.0
v1.15.8-beta.1
v1.15.9
v1.15.9-beta.0
v1.16.0
v1.16.0-alpha.0
v1.16.1
v1.16.1-beta.0
v1.16.2
v1.16.2-beta.0
v1.16.3
v1.16.3-beta.0
v1.16.4
v1.16.4-beta.0
v1.16.5
v1.16.5-beta.0
v1.16.5-beta.1
v1.16.6
v1.16.6-beta.0
v1.17.0
v1.17.1
v1.17.1-beta.0
v1.17.2
v1.17.2-beta.0
v1.2.0-alpha.1
v1.2.0-alpha.2
v1.2.0-alpha.3
v1.2.0-alpha.4
v1.2.0-alpha.5
v1.2.0-alpha.6
v1.2.0-alpha.7
v1.2.0-alpha.8
v1.3.0-alpha.0
v1.3.0-alpha.1
v1.3.0-alpha.2
v1.3.0-alpha.3
v1.3.0-alpha.4
v1.3.0-alpha.5
v1.4.0-alpha.1
v1.4.0-alpha.2
v1.4.0-alpha.3
v1.5.0-alpha.0
v1.5.0-alpha.1
v1.5.0-alpha.2
v1.6.0-alpha.0
v1.6.0-alpha.1
v1.6.0-alpha.2
v1.6.0-alpha.3
v1.7.0-alpha.0
v1.7.0-alpha.1
v1.7.0-alpha.2
v1.7.0-alpha.3
v1.7.0-alpha.4
v1.8.0-alpha.0
v1.8.0-alpha.1
v1.8.0-alpha.2
v1.8.0-alpha.3
v1.9.0-alpha.0
v1.9.0-alpha.1
v1.9.0-alpha.2
v1.9.0-alpha.3

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2020-8552.json"