Published: 27/03/2020 Updated: 07/11/2023

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 4.3 | Impact Score: 1.4 | Exploitability Score: 2.8

VMScore: 357

Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

The Kubernetes API server component in versions before 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.

Vulnerable Product	Search on Vulmon	Subscribe to Product
kubernetes kubernetes
fedoraproject fedora 32

Synopsis Moderate: OpenShift Container Platform 4229 openshift security update Type/Severity Security Advisory: Moderate Topic An update for openshift is now available for Red Hat OpenShift Container Platform 42Red Hat Product Security has rated this update as having a security impact of Moderate A Com ...

Synopsis Moderate: OpenShift Container Platform 4229 openshift-enterprise-hyperkube-container security update Type/Severity Security Advisory: Moderate Topic An update for openshift-enterprise-hyperkube-container is now available for Red Hat OpenShift Container Platform 42Red Hat Product Security has ra ...

Synopsis Moderate: OpenShift Container Platform 4234 ose-openshift-apiserver-container security update Type/Severity Security Advisory: Moderate Topic An update for ose-openshift-apiserver-container is now available for Red Hat OpenShift Container Platform 42Red Hat Product Security has rated this updat ...

Synopsis Moderate: OpenShift Container Platform 439 ose-openshift-apiserver-container security update Type/Severity Security Advisory: Moderate Topic An update for ose-openshift-apiserver-container is now available for Red Hat OpenShift Container Platform 43Red Hat Product Security has rated this update ...

Synopsis Moderate: OpenShift Container Platform 311 security update Type/Severity Security Advisory: Moderate Topic An update for atomic-openshift, atomic-openshift-web-console, and cri-o is now available for Red Hat OpenShift Container Platform 311Red Hat Product Security has rated this update as having ...

oss-sec mailing list archives   By Date By Thread </form>    CVE-2020-8551, CVE-2020-8552: Kubernetes: Denial of service   From: Tim A ...

Certified Kubernetes Security Specialist (CKS) Coming soon November 2020 Online resources that will help you prepare for taking the Kubernetes Certified Kubernetes Security Specialist Certification exam Disclaimer: This is not likely a comprehensive list as the exam is not out yet, most likely will be a moving target with the fast pace of k8s development please make a pull re

CKS 官方考纲 CKS 官方考纲: [CKS_Curriculum_ v119pdf](/CKS_Curriculum_ v119pdf) Cluster Setup - 10% Securing a Cluster Use Network security policies to restrict cluster level access kubernetesio/docs/concepts/services-networking/network-policies/ Use CIS benchmark to review the security configuration of Kubernetes components(etcd, kubelet, kubedns, ku

Learning how to deploy a simple 3 nodes (1 server and 2 agents) k3s cluster with rancher ui installed through a docker-compose.

Rancher/k3s cluster in docker containers Learning how to deploy a simple 3 nodes (1 server and 2 agents) k3s cluster with rancher ui installed through a docker-compose Environment It's possible to define env variables in a env file at the same level of the docker compose file ENV: K3S_VERSION: official rancher/k3s image version (default latest) K3S_URL: server url K3S_

CWE-770 https://github.com/kubernetes/kubernetes/issues/89378 https://security.netapp.com/advisory/ntap-20200413-0003/https://groups.google.com/forum/#%21topic/kubernetes-security-announce/2UOlsba2g0s https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3SOCLOPTSYABTE4CLTSPDIFE6ZZZR4LX/https://nvd.nist.gov https://access.redhat.com/errata/RHSA-2020:1527 https://github.com/DanielePeruzzi97/rancher-k3s-docker

CVE-2020-8552

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Mailing Lists

Github Repositories

References

Vulmon Search

About

Products

Connect