~ / search / GHSA-82hx-w2r5-c2wq

GHSA-82hx-w2r5-c2wq

Kubernetes API Server DoS Via API Requests

Source: GitHub Advisory Database (reviewed) Moderate CVE-2020-8552

Packages

EcosystemPackageAffectedFixed in
Go k8s.io/apiserver < 0.15.10 0.15.10
Go k8s.io/apiserver >= 0.16.0, < 0.16.7 0.16.7
Go k8s.io/apiserver >= 0.17.0, < 0.17.3 0.17.3

Details

As written in the advisory (Markdown source, shown as plain text).

The Kubernetes API server component in Kubernetes versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.

References

External links from the advisory. They lead to third-party sites.