CVE-2020-8557

 

Published at: - 23-07-2020 07:15

Last modified: - 27-01-2023 09:35

Total changes: - 2

Description

The Kubernetes kubelet component in versions 1.1-1.16.12, 1.17.0-1.17.8 and 1.18.0-1.18.5 do not account for disk usage by a pod which writes to its own /etc/hosts file. The /etc/hosts file mounted in a pod by kubelet is not included by the kubelet eviction manager when calculating ephemeral storage usage by a pod. If a pod writes a large amount of data to the /etc/hosts file, it could fill the storage space of the node and cause the node to fail.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

 

Verification logic

 

Reference

• https://github.com/kubernetes/kubernetes/issues/93032
• [Security Advisory] CVE-2020-8557: Node disk DOS by writing to container /etc/hosts-Mailing List, Third Party Advisory
• https://security.netapp.com/advisory/ntap-20200821-0002/

 

Keywords

NVD

 

CVE-2020-8557

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures