DirectorySecurity Advisories
Sign In
Security Advisories

CGA-g466-3pmc-wvm7

Published

Last updated

https://images.chainguard.dev/security/CGA-g466-3pmc-wvm7
Package

kubernetes-dns-node-cache-1.17

Latest Update
Not affected
Aliases
  • CVE-2020-8551
  • GHSA-qhm4-jxv7-j9pq

Severity

4.3

Medium

CVSS V3

Summary

Allocation of Resources Without Limits or Throttling and Uncontrolled Memory Allocation in Kubernetes

Description

The Kubelet component in versions 1.15.0-1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via the kubelet API, including the unauthenticated HTTP read-only API typically served on port 10255, and the authenticated HTTPS API typically served on port 10250.

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2024 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard Images