GHSA-jgfp-53c3-624w
Suggest an improvement- Source
- https://github.com/advisories/GHSA-jgfp-53c3-624w
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/02/GHSA-jgfp-53c3-624w/GHSA-jgfp-53c3-624w.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/GHSA-jgfp-53c3-624w
- Aliases
- Downstream
- Related
- Published
- 2025-02-13T18:32:33Z
- Modified
- 2025-03-03T19:46:04.996925Z
- Severity
-
- 6.2 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- Node Denial of Service via kubelet Checkpoint API
- Details
-
A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk.
- Database specific
{ "nvd_published_at": "2025-02-13T16:16:48Z", "cwe_ids": [ "CWE-400" ], "severity": "MODERATE", "github_reviewed_at": "2025-02-13T20:55:29Z", "github_reviewed": true }- References
Affected packages
Go / k8s.io/kubernetes
Package
- Name
- k8s.io/kubernetes
- View open source insights on deps.dev
- Purl
- pkg:golang/k8s.io/kubernetes
Go / k8s.io/kubernetes
Package
- Name
- k8s.io/kubernetes
- View open source insights on deps.dev
- Purl
- pkg:golang/k8s.io/kubernetes
Go / k8s.io/kubernetes
Package
- Name
- k8s.io/kubernetes
- View open source insights on deps.dev
- Purl
- pkg:golang/k8s.io/kubernetes
Go / k8s.io/kubernetes
Package
- Name
- k8s.io/kubernetes
- View open source insights on deps.dev
- Purl
- pkg:golang/k8s.io/kubernetes