vulnerability
Red Hat OpenShift: CVE-2020-8551: kubernetes: crafted requests to kubelet API allow for memory exhaustion
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 3 | (AV:A/AC:L/Au:N/C:N/I:N/A:P) | 2020-03-27 | 2020-04-08 | 2025-04-14 |
Severity
3
CVSS
(AV:A/AC:L/Au:N/C:N/I:N/A:P)
Published
2020-03-27
Added
2020-04-08
Modified
2025-04-14
Description
The Kubelet component in versions 1.15.0-1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via the kubelet API, including the unauthenticated HTTP read-only API typically served on port 10255, and the authenticated HTTPS API typically served on port 10250.
Solution
linuxrpm-upgrade-openshift
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.