CVE-2020-8552

The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.

Published: Mar 27, 2020
Updated: May 9, 2024
CVE: CVE-2020-8552
GHSA: GHSA-82hx-w2r5-c2wq
Severity: Low
Exploit:

CVSS v3:

Severity: Low
Score: 4.3
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CVSS v2:

Severity: Low
Score: 4
AV:N/AC:L/Au:S/C:N/I:N/A:P

CWEs:

CWE-400
CWE-789
CWE-770

Affected Software
References

Software	From	Fixed in
kubernetes / kubernetes	1.17.0	1.17.2.x
kubernetes / kubernetes	1.16.0	1.16.6.x
kubernetes / kubernetes	-	1.15.9.x
fedoraproject / fedora	32	32.x
k8s.io/kubernetes/staging/src/k8s.io/apiserver/pkg/server	-	1.15.10
k8s.io/kubernetes/staging/src/k8s.io/apiserver/pkg/server	1.16.0	1.16.7
k8s.io/kubernetes/staging/src/k8s.io/apiserver/pkg/server	1.17.0	1.17.3

https://github.com/kubernetes/kubernetes/commit/5978856c4c7f10737a11c9540fe60b8475beecbb
https://github.com/kubernetes/kubernetes/issues/89378
https://github.com/kubernetes/kubernetes/pull/87669
https://groups.google.com/forum/#!topic/kubernetes-security-announce/2UOlsba2g0s
https://groups.google.com/forum/#%21topic/kubernetes-security-announce/2UOlsba2g0s
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SOCLOPTSYABTE4CLTSPDIFE6ZZZR4LX/
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3SOCLOPTSYABTE4CLTSPDIFE6ZZZR4LX/
https://security.netapp.com/advisory/ntap-20200413-0003/

Vulnerability Database

CVE-2020-8552

Deep Security Visibility Without the Complexity