CVE-2025-0426
CVE-2025-0426
This page contains facts from public vulnerability sources. Check the original advisory before updating.
A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk.
CVSS 6.2 · Medium · EPSS 0.4% · Fix available
- Published
- Updated
Stack: system · containers
Affected products and versions
kubernetes
- Versions
- ≥ 1.32.0, ≤ 1.32.1: Affected (semver)
- ≥ 1.31.0, ≤ 1.31.5: Affected (semver)
- ≥ 1.30.0, ≤ 1.30.9: Affected (semver)
- 1.32.2: Not affected
- 1.31.6: Not affected
- 1.30.10: Not affected
No fix published
kubernetes Debian:12
- Affected ranges
- ECOSYSTEM: < 1.20.5+really1.20.2-1
Update to 1.20.5+really1.20.2-1
kubernetes Debian:13
- Affected ranges
- ECOSYSTEM: < 1.20.5+really1.20.2-1
Update to 1.20.5+really1.20.2-1
kubernetes Debian:14
- Affected ranges
- ECOSYSTEM: < 1.20.5+really1.20.2-1
Update to 1.20.5+really1.20.2-1