All vulnerabilities

Servers and applications

CVE-2020-8551

The Kubelet component in versions 1.15.0-1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via the kubelet API, including the unauthenticated HTTP read-only API typically served on port 10255, and the authenticated HTTPS API typically served on port 10250.

Severity
Medium 6.5
Published
27 Mar 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
KubernetesServers and applications · cpe:a:kubernetes:kubernetes
  • From 1.15.0 up to 1.15.9
  • From 1.16.0 up to 1.16.6
  • From 1.17.0 up to 1.17.2

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-8551
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-8551