CVE-2020-8551
Fixed in a distro release EPSS 1%CVSS 4.3
The Kubelet component in versions 1.15.0-1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via the kubelet API, including the unauthenticated HTTP read-only API typically served on port 10255, and the authenticated HTTPS API typically served on port 10250.
Products: Kubernetes
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | k8s.io/kubernetes | 1.15.10 |
| Go | k8s.io/kubernetes | 1.16.6 |
| Go | k8s.io/kubernetes | 1.17.2 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | kubernetes-dns-node-cache-1.17 | 0 |
| Debian:12 | kubernetes | 1.17.4-1 |
| Debian:13 | kubernetes | 1.17.4-1 |
| Debian:14 | kubernetes | 1.17.4-1 |
| Red Hat:openshift:4.3 | openshift | 0:4.3.10-202003300855.git.0.da48c1d.el7 |
| Red Hat:openshift:4.3 | openshift | 0:4.3.10-202003300855.git.0.da48c1d.el8 |
| Red Hat:openshift:4.3 | openshift-hyperkube | 0:4.3.10-202003300855.git.0.da48c1d.el7 |
| Red Hat:openshift:4.3 | openshift-hyperkube | 0:4.3.10-202003300855.git.0.da48c1d.el8 |
| openSUSE:Tumbleweed | govulncheck-vulndb | 0.0.20250807T150727-1.1 |