{"id":"CVE-2020-8552","details":"The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.","aliases":["GHSA-82hx-w2r5-c2wq"],"modified":"2026-08-07T11:48:33.575181701Z","published":"2020-03-27T15:15:12.757Z","related":["CGA-5hwq-fqv8-3gwc"],"database_specific":{"unresolved_ranges":[{"cpes":["cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*"],"extracted_events":[{"introduced":"32"},{"last_affected":"32"}],"source":"CPE_STRING","vendor_product":"fedoraproject:fedora"}]},"references":[{"type":"WEB","url":"https://groups.google.com/forum/#%21topic/kubernetes-security-announce/2UOlsba2g0s"},{"type":"WEB","url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3SOCLOPTSYABTE4CLTSPDIFE6ZZZR4LX/"},{"type":"ADVISORY","url":"https://security.netapp.com/advisory/ntap-20200413-0003/"},{"type":"FIX","url":"https://github.com/kubernetes/kubernetes/issues/89378"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/kubernetes/kubelet","events":[{"introduced":"0"},{"last_affected":"095c6bd056162bc90c3d4c9050b34a7265bba659"},{"introduced":"250a1838aa2c492c9096ff86558515b8639d7e87"},{"last_affected":"9a74903985bd83003e2aeebffba9e08b8690db42"},{"introduced":"f9974c2baa2d9ca25416d38e7ecfc7ff4d05d58e"},{"last_affected":"3d0d0a3a4b4425943a61f8843bbcf9483ef4845a"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"last_affected":"1.15.9"},{"introduced":"1.16.0"},{"last_affected":"1.16.6"},{"introduced":"1.17.0"},{"last_affected":"1.17.2"}],"source":"CPE_RANGE","cpe":"cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*"}}],"versions":["v0.17.2","kubernetes-1.17.2","v0.16.6","kubernetes-1.16.6","v0.15.9","kubernetes-1.15.9","kubernetes-1.9.0-alpha.3","kubernetes-1.9.0-alpha.2","kubernetes-1.9.0-alpha.1","kubernetes-1.9.0-alpha.0","kubernetes-1.13.0-alpha.0","kubernetes-1.12.0-beta.0","kubernetes-1.12.0-alpha.1","kubernetes-1.12.0-alpha.0","kubernetes-1.11.0-alpha.2","kubernetes-1.11.0-alpha.1","kubernetes-1.11.0-alpha.0","kubernetes-1.10.0-alpha.3","kubernetes-1.10.0-alpha.2","kubernetes-1.10.0-alpha.1","kubernetes-1.10.0-alpha.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-8552.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/kubernetes/kubernetes","events":[{"introduced":"0"},{"last_affected":"2e808b7cb054ee242b68e62455323aa783991f03"},{"introduced":"2bd9643cee5b3b3a5ecbd3af49d09018f0773c77"},{"last_affected":"72c30166b2105cd7d3350f2c28a219e6abcd79eb"},{"introduced":"70132b0f130acc0bed193d9ba59dd186f0e634cf"},{"last_affected":"59603c6e503c87169aea6106f57b9f242f64df89"}],"database_specific":{"source":"CPE_RANGE","cpe":"cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"last_affected":"1.15.9"},{"introduced":"1.16.0"},{"last_affected":"1.16.6"},{"introduced":"1.17.0"},{"last_affected":"1.17.2"}]}}],"versions":["v1.15.9","v1.16.6","v1.17.2","v1.17.2-beta.0","v1.16.6-beta.0","v1.16.5","v1.15.9-beta.0","v1.15.8","v1.17.1","v1.16.5-beta.1","v1.15.8-beta.1","v1.16.5-beta.0","v1.16.4","v1.15.8-beta.0","v1.15.7","v1.17.0","v1.17.1-beta.0","v1.15.6","v1.16.4-beta.0","v1.15.7-beta.0","v1.16.3","v1.16.2","v1.16.3-beta.0","v1.15.6-beta.0","v1.15.5","v1.16.2-beta.0","v1.16.1","v1.15.5-beta.0","v1.16.1-beta.0","v1.15.4","v1.16.0","v1.15.4-beta.0","v1.15.3","v1.15.3-beta.0","v1.15.2","v1.15.2-beta.0","v1.15.1","v1.15.0","v1.15.1-beta.0","v1.15.0-rc.1","v1.15.0-beta.2","v1.15.0-beta.1","v1.15.0-beta.0","v1.16.0-alpha.0","v1.15.0-alpha.3","v1.15.0-alpha.2","v1.15.0-alpha.1","v1.14.0-alpha.3","v1.15.0-alpha.0","v1.14.0-alpha.2","v1.14.0-alpha.1","v1.14.0-alpha.0","v1.13.0-alpha.3","v1.13.0-alpha.2","v1.13.0-alpha.1","v1.13.0-alpha.0","v1.12.0-alpha.1","v1.12.0-alpha.0","v1.11.0-alpha.2","v1.11.0-alpha.1","v1.11.0-alpha.0","v1.10.0-alpha.3","v1.10.0-alpha.2","v1.10.0-alpha.1","v1.9.0-alpha.3","v1.10.0-alpha.0","v1.9.0-alpha.2","v1.9.0-alpha.1","v1.9.0-alpha.0","v1.8.0-alpha.3","v1.8.0-alpha.2","v1.8.0-alpha.0","v1.8.0-alpha.1","v1.7.0-alpha.4","v1.7.0-alpha.3","v1.7.0-alpha.2","v1.7.0-alpha.1","v1.7.0-alpha.0","v1.6.0-alpha.3","v1.6.0-alpha.2","v1.6.0-alpha.1","v1.6.0-alpha.0","v1.5.0-alpha.2","v1.5.0-alpha.1","v1.5.0-alpha.0","v1.4.0-alpha.3","v1.4.0-alpha.1","v1.4.0-alpha.2","v1.3.0-alpha.5","v1.3.0-alpha.4","v1.3.0-alpha.3","v1.3.0-alpha.1","v1.3.0-alpha.2","v1.3.0-alpha.0","v1.2.0-alpha.8","v1.2.0-alpha.7","v1.2.0-alpha.6","v1.2.0-alpha.5","v1.2.0-alpha.4","v1.2.0-alpha.3","v1.2.0-alpha.2","v1.2.0-alpha.1","v1.1.0-alpha.1","v1.1.0-alpha.0","v0.17.0","v0.13.1-dev"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-8552.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L"}]}