p PatchFirst

CVE-2020-8552

CVE-2020-8552 · Kubernetes API server denial of service

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.

CVSS 5.3 · Medium · EPSS 2.4% · Fix available

Published
Updated

Stack: system · containers

Affected products and versions

  • kubernetes

    Versions
    • ≥ unspecified, < v1.17.3: Affected (custom)
    • ≥ unspecified, < v1.16.7: Affected (custom)
    • ≥ unspecified, < v1.15.10: Affected (custom)

    Update to v1.17.3

  • kubernetes Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.17.4-1

    Update to 1.17.4-1

  • kubernetes Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.17.4-1

    Update to 1.17.4-1

  • kubernetes Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.17.4-1

    Update to 1.17.4-1

Original sources

Check your server →