Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2020-8557

Kubernetes node disk Denial of Service by writing to container /etc/hosts

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
kubernetes

Description

The Kubernetes kubelet component in versions 1.1-1.16.12, 1.17.0-1.17.8 and 1.18.0-1.18.5 do not account for disk usage by a pod which writes to its own /etc/hosts file. The /etc/hosts file mounted in a pod by kubelet is not included by the kubelet eviction manager when calculating ephemeral storage usage by a pod. If a pod writes a large amount of data to the /etc/hosts file, it could fill the storage space of the node and cause the node to fail.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kubernetes Kubernetes

  • 1.15affected
  • 1.14affected
  • 1.13affected
  • 1.12affected
  • 1.11affected
  • 1.10affected
  • 1.9affected
  • 1.8affected
  • 1.7affected
  • 1.6affected
  • 1.5affected
  • 1.4affected
  • 1.3affected
  • 1.2affected
  • 1.1affected
  • 1.18 to < 1.18.6affected
  • 1.17 to < 1.17.9affected
  • 1.16 to < 1.16.13affected

References