CVE-2020-8552

Опубликовано: 27 мар. 2020

Источник: nvd

CVSS3: 5.3

CVSS3: 4.3

CVSS2: 4

EPSS Низкий

Описание

The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.

Ссылки

https://github.com/kubernetes/kubernetes/issues/89378
Issue Tracking
Patch
Third Party Advisory
https://groups.google.com/forum/#%21topic/kubernetes-security-announce/2UOlsba2g0s
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3SOCLOPTSYABTE4CLTSPDIFE6ZZZR4LX/
https://security.netapp.com/advisory/ntap-20200413-0003/
Third Party Advisory
https://github.com/kubernetes/kubernetes/issues/89378
Issue Tracking
Patch
Third Party Advisory
https://groups.google.com/forum/#%21topic/kubernetes-security-announce/2UOlsba2g0s
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3SOCLOPTSYABTE4CLTSPDIFE6ZZZR4LX/
https://security.netapp.com/advisory/ntap-20200413-0003/
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*

Версия до 1.15.9 (включая)

cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*

Версия от 1.16.0 (включая) до 1.16.6 (включая)

cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*

Версия от 1.17.0 (включая) до 1.17.2 (включая)

Конфигурация 2

cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*

EPSS

Процентиль: 87%

0.02845

Низкий

5.3 Medium

CVSS3

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-789

CWE-770

Связанные уязвимости

CVE-2020-8552

CVSS3: 4.3

ubuntu

больше 6 лет назад

The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.

CVE-2020-8552

CVSS3: 4.3

redhat

больше 6 лет назад

The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.

CVE-2020-8552

CVSS3: 4.3

debian

больше 6 лет назад

The Kubernetes API server component in versions prior to 1.15.9, 1.16. ...

GHSA-82hx-w2r5-c2wq

CVSS3: 5.3

github

больше 4 лет назад

Kubernetes API Server DoS Via API Requests

ALT-PU-2020-1662

CVSS3: 6.5

altlinux

больше 6 лет назад

ALT-PU-2020-1662: package `kubernetes` update to version 1.18.0-alt1

EPSS

Процентиль: 87%

0.02845

Низкий

5.3 Medium

CVSS3

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-789

CWE-770