CVE-2020-8552

Go/k8s.io/apiserver CVE-2020-8552: medium 5.3

Kubernetes API Server DoS Via API Requests

Action: Upgrade k8s.io/apiserver to 0.15.10 or later.

go get k8s.io/apiserver@v0.15.10

go get k8s.io/apiserver@v0.16.7

go get k8s.io/apiserver@v0.17.3

Affected

Fixed versions

Sources

• osv: GHSA-82hx-w2r5-c2wq
• https://nvd.nist.gov/vuln/detail/CVE-2020-8552
• https://github.com/kubernetes/kubernetes/issues/89378
• https://github.com/kubernetes/kubernetes/pull/87669
• https://github.com/kubernetes/kubernetes/commit/5978856c4c7f10737a11c9540fe60b8475beecbb
• https://groups.google.com/forum/#!topic/kubernetes-security-announce/2UOlsba2g0s
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SOCLOPTSYABTE4CLTSPDIFE6ZZZR4LX
• https://security.netapp.com/advisory/ntap-20200413-0003

CVE-2020-8552 · published 2022-02-15T01:57:18Z · modified 2026-09-10T03:49:11.693834878Z · JSON