cve.bz

CVE-2020-8551

6.5 mediumEPSS 1.2%

Medium (6.5). EPSS 1.2% chance of exploitation in the next 30 days. Fixed in k8s.io/kubernetes 1.15.10, 1.16.6, 1.17.2.

The Kubelet component in versions 1.15.0-1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via the kubelet API, including the unauthenticated HTTP read-only API typically served on port 10255, and the authenticated HTTPS API typically served on port 10250.

Severity

CVSS 3.1

6.5 medium
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
1.2% chance of exploitation in the next 30 days; higher than 69% of CVEs (scores of 2026-10-31)
CWEs
CWE-770, CWE-789
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-qhm4-jxv7-j9pqGok8s.io/kubernetes>=1.15.0 <1.15.101.15.10
GHSA-qhm4-jxv7-j9pqGok8s.io/kubernetes>=1.16.0 <1.16.61.16.6
GHSA-qhm4-jxv7-j9pqGok8s.io/kubernetes>=1.17.0 <1.17.21.17.2
GO-2022-0867Gok8s.io/kubernetes>=1.15.0 <1.15.10
>=1.16.0 <1.16.6
>=1.17.0 <1.17.2		1.15.10, 1.16.6, 1.17.2

References

Check your stackJSON