All vulnerabilities

Servers and applications

CVE-2020-8558

The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain a security issue which allows adjacent hosts to reach TCP and UDP services bound to 127.0.0.1 running on the node or in the node's network namespace. Such a service is generally thought to be reachable only by other processes on the same host, but due to this defeect, could be…

Severity
High 8.8
Published
27 Jul 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
KubernetesServers and applications · cpe:a:kubernetes:kubernetes
  • From 1.1.0 up to 1.16.10
  • From 1.17.0 up to 1.17.6
  • From 1.18.0 up to 1.18.3

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-8558
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-8558