Description
The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Kubernetes Kubernetes
unspecified to < v1.17.3affectedunspecified to < v1.16.7affectedunspecified to < v1.15.10affected
References
- https://groups.google.com/forum/#%21topic/kubernetes-security-announce/2UOlsba2g0s ↗
- https://github.com/kubernetes/kubernetes/issues/89378 ↗
- https://security.netapp.com/advisory/ntap-20200413-0003/ ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3SOCLOPTSYABTE4CLTSPDIFE6ZZZR4LX/ ↗