CVE-2020-8552

Allocation of Resources Without Limits or Throttling in go/github.com/kubernetes/kubernetes

Identifiers

CVE-2020-8552

Package Slug

go/github.com/kubernetes/kubernetes

Vulnerability

Allocation of Resources Without Limits or Throttling

Description

The Kubernetes API server component has been found to be vulnerable to a denial of service attack via successful API requests.

Affected Versions

All versions up to 1.15.9, all versions starting from 1.16.0 up to 1.16.6, all versions starting from 1.17.0 up to 1.17.2

Solution

Upgrade to versions v1.15.10, v1.16.7, v1.17.3 or above

Last Modified

2020-08-05

source