1. Home
  2. Vulnerabilities
  3. CVE-2020-8557

CVE-2020-8557

CVSS v3.1 5.5 (Medium)
55% Progress
CVSS v2.0 2.1 (Low)
21% Progress
EPSS 0.04 % (13th)
0.04% Progress
Affected Products 1
Advisories 5
Info CVSS EPSS CAPEC Affected Configurations References Security Advisories Packages & Software OVAL Tools, Exploits & PoC Graph Web & Social Timeline

The Kubernetes kubelet component in versions 1.1-1.16.12, 1.17.0-1.17.8 and 1.18.0-1.18.5 do not account for disk usage by a pod which writes to its own /etc/hosts file. The /etc/hosts file mounted in a pod by kubelet is not included by the kubelet eviction manager when calculating ephemeral storage usage by a pod. If a pod writes a large amount of data to the /etc/hosts file, it could fill the storage space of the node and cause the node to fail.

Weaknesses
CWE-400
Uncontrolled Resource Consumption
CVE Status
PUBLISHED
CNA
Kubernetes
Published Date
2020-07-23 17:15:12
(4 years ago)
Updated Date
2023-01-27 20:35:47
(19 months ago)

Affected Products

Kubernetes

Configuration #1

    CPE23 From Up To
  Kubernetes prior 1.16.13 version cpe:2.3:a:kubernetes:kubernetes < 1.16.13
  Kubernetes from 1.17.0 version and prior 1.17.9 version cpe:2.3:a:kubernetes:kubernetes >= 1.17.0 < 1.17.9
  Kubernetes from 1.18.0 version and prior 1.18.6 version cpe:2.3:a:kubernetes:kubernetes >= 1.18.0 < 1.18.6