Riskcovery

CVE-2020-8557

Kubernetes node disk Denial of Service by writing to container /etc/hosts

State
Published
Severity
5.5 Medium
Published
Jul 23, 2020
Updated
Sep 17, 2024
Reserved
Feb 3, 2020

Read the record on cve.org

Description

The Kubernetes kubelet component in versions 1.1-1.16.12, 1.17.0-1.17.8 and 1.18.0-1.18.5 do not account for disk usage by a pod which writes to its own /etc/hosts file. The /etc/hosts file mounted in a pod by kubelet is not included by the kubelet eviction manager when calculating ephemeral storage usage by a pod. If a pod writes a large amount of data to the /etc/hosts file, it could fill the storage space of the node and cause the node to fail.

Scores

CVSSScoreVectorSource
3.15.5 MediumCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hkubernetes

Weaknesses

  • CWE-400 Uncontrolled Resource Consumption

Affected Products

ProductVersions
KubernetesKubernetes
  • 1.15Affected
  • 1.14Affected
  • 1.13Affected
  • 1.12Affected
  • 1.11Affected
  • 1.10Affected
  • 1.9Affected
  • 1.8Affected
  • 1.7Affected
  • 1.6Affected
  • 1.5Affected
  • 1.4Affected
  • 1.3Affected
  • 1.2Affected
  • 1.1Affected
  • 1.18 to before 1.18.6Affected
  • 1.17 to before 1.17.9Affected
  • 1.16 to before 1.16.13Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.