Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Kubernetes v1.15.10, v1.16.7, v1.17.3 Clear all filters
TI-2020-06852 CVE-2020-8552 · GHSA-82hx-w2r5-c2wq

Kubernetes API server denial of service

Priority LOW 29

The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.02845 Published 2020-03-27 Partial fix · v1.17.3, v1.16.7 +4 CWE-789
TI-2020-06851 CVE-2020-8551 · GHSA-qhm4-jxv7-j9pq

Kubernetes kubelet denial of service

Priority LOW 31

The Kubelet component in versions 1.15.0-1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via the kubelet API, including the unauthenticated HTTP read-only API typica…

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.01242 Published 2020-03-27 Fixed in v1.17.3, v1.16.7 +4 CWE-789