onyx --cves cve-2020-8551
CVE-2020-8551
- score
- <0.1
- cvss
- 4.3
- epss
- 1.2%
- published
- 2020-03-27
- kev added
- —
- first seen
Kubelet versions 1.15.0-1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 contain a denial of service caused by vulnerabilities in the kubelet API, including unauthenticated HTTP read-only API on port 10255 and authenticated HTTPS API on port 10250, letting attackers cause service disruption, exploit requires network access to API ports.
Timeline
How this CVE moved toward exploitation. Chart: last 30 days — trend score, EPSS, community mentions per day; hover the event lane.
- Published
- Tracked by Onyx
Weaknesses
References 4
- https://groups.google.com/forum/#%21topic/kubernetes-security-announce/2UOlsba2g0s
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3SOCLOPTSYABTE4CLTSPDIFE6ZZZR4LX/
- https://github.com/kubernetes/kubernetes/issues/89377
- https://security.netapp.com/advisory/ntap-20200413-0003/