En bref
- CVE-2020-8552 est une vulnérabilité MOYENNE (CVSS 4.3) touchant k8s.io/apiserver, kubernetes (kubernetes).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 3.0%, plus élevée que 87.2% des vulnérabilités.
- Correctif : mettre à jour vers 0.16.7, 0.17.3, 0.15.10 ou plus récent.
| Package | Affected versions | Patched versions |
|---|
| k8s.io/apiserver Go | ≥ 0.16.0, < 0.16.7≥ 0.17.0, < 0.17.3< 0.15.10
| 0.16.70.17.30.15.10
|
| kubernetes | ≥ 1.16.0, ≤ 1.16.6≥ 1.17.0, ≤ 1.17.2≤ 1.15.9
| No fix yet |
Description
The Kubernetes API server component in Kubernetes versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.
NVD description
The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free