{"id":"CVE-2020-8552","aliases":["DEBIAN-CVE-2020-8552","EUVD-2022-0898","GHSA-82hx-w2r5-c2wq","RHBA-2020:0929","RHBA-2020:2215","RHSA-2020:1527","RHSA-2020:2992","UBUNTU-CVE-2020-8552"],"status":"published","title":"Kubernetes API server denial of service","description":"The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.02845,"percentile":0.86789,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-400","CWE-770","CWE-789"],"published":"2020-03-27T14:25:15Z","modified":"2026-10-26T12:02:51Z","fixes":[{"ecosystem":"Go","package":"k8s.io/apiserver","fixed_in":["0.15.10","0.16.7","0.17.3"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:12","package":"kubernetes","fixed_in":["1.17.4-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"kubernetes","fixed_in":["1.17.4-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"kubernetes","fixed_in":["1.17.4-1"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.3::el7","package":"openshift","fixed_in":["0:4.3.9-202003230116.git.0.ebf9a26.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.3::el7","package":"openshift-hyperkube","fixed_in":["0:4.3.9-202003230116.git.0.ebf9a26.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.3::el8","package":"openshift","fixed_in":["0:4.3.9-202003230116.git.0.ebf9a26.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.3::el8","package":"openshift-hyperkube","fixed_in":["0:4.3.9-202003230116.git.0.ebf9a26.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-enterprise-service-catalog","fixed_in":["1:3.11.219-1.git.1.717017c.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-enterprise-service-catalog-svcat","fixed_in":["1:3.11.219-1.git.1.717017c.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift","fixed_in":["0:3.11.219-1.git.0.0c21387.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-clients","fixed_in":["0:3.11.219-1.git.0.0c21387.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-clients-redistributable","fixed_in":["0:3.11.219-1.git.0.0c21387.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-cluster-autoscaler","fixed_in":["0:3.11.219-1.git.1.1ad3e34.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-descheduler","fixed_in":["0:3.11.219-1.git.1.7e5b9ee.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-docker-excluder","fixed_in":["0:3.11.219-1.git.0.0c21387.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-dockerregistry","fixed_in":["0:3.11.219-1.git.1.8323991.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-excluder","fixed_in":["0:3.11.219-1.git.0.0c21387.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-hyperkube","fixed_in":["0:3.11.219-1.git.0.0c21387.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-hypershift","fixed_in":["0:3.11.219-1.git.0.0c21387.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-master","fixed_in":["0:3.11.219-1.git.0.0c21387.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-metrics-server","fixed_in":["0:3.11.219-1.git.1.6fe54fb.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-node","fixed_in":["0:3.11.219-1.git.0.0c21387.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-node-problem-detector","fixed_in":["0:3.11.219-1.git.1.5ae8753.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-pod","fixed_in":["0:3.11.219-1.git.0.0c21387.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-sdn-ovs","fixed_in":["0:3.11.219-1.git.0.0c21387.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-service-idler","fixed_in":["0:3.11.219-1.git.1.958cdae.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-template-service-broker","fixed_in":["0:3.11.219-1.git.0.0c21387.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-tests","fixed_in":["0:3.11.219-1.git.0.0c21387.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"golang-github-openshift-oauth-proxy","fixed_in":["0:3.11.219-1.git.1.076ae14.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"golang-github-prometheus-alertmanager","fixed_in":["0:3.11.219-1.git.1.9a593f8.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"golang-github-prometheus-node_exporter","fixed_in":["0:3.11.219-1.git.1.7fa9674.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"golang-github-prometheus-prometheus","fixed_in":["0:3.11.219-1.git.1.3f6e657.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible","fixed_in":["0:3.11.219-1.git.0.8845382.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-docs","fixed_in":["0:3.11.219-1.git.0.8845382.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-playbooks","fixed_in":["0:3.11.219-1.git.0.8845382.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-roles","fixed_in":["0:3.11.219-1.git.0.8845382.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-test","fixed_in":["0:3.11.219-1.git.0.8845382.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-enterprise-autoheal","fixed_in":["0:3.11.219-1.git.1.c544df9.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-enterprise-cluster-capacity","fixed_in":["0:3.11.219-1.git.1.ca1ee51.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-kuryr","fixed_in":["0:3.11.219-1.git.1.717d59f.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-kuryr-cni","fixed_in":["0:3.11.219-1.git.1.717d59f.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-kuryr-common","fixed_in":["0:3.11.219-1.git.1.717d59f.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-kuryr-controller","fixed_in":["0:3.11.219-1.git.1.717d59f.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"prometheus","fixed_in":["0:3.11.219-1.git.1.3f6e657.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"prometheus-alertmanager","fixed_in":["0:3.11.219-1.git.1.9a593f8.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"prometheus-node-exporter","fixed_in":["0:3.11.219-1.git.1.7fa9674.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:3.11::el7","package":"python2-kuryr-kubernetes","fixed_in":["0:3.11.219-1.git.1.717d59f.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el7","package":"openshift","fixed_in":["0:4.2.29-202004120346.git.0.d948116.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el7","package":"openshift-hyperkube","fixed_in":["0:4.2.29-202004120346.git.0.d948116.el7"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el8","package":"openshift","fixed_in":["0:4.2.29-202004110432.git.0.f7d02c8.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.2::el8","package":"openshift-hyperkube","fixed_in":["0:4.2.29-202004110432.git.0.f7d02c8.el8"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"k8s.io/apiserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.15.10"}]}]},{"source":"ghsa","ecosystem":"Go","package":"k8s.io/apiserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.16.0"},{"fixed":"0.16.7"}]}]},{"source":"ghsa","ecosystem":"Go","package":"k8s.io/apiserver","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0.17.0"},{"fixed":"0.17.3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.4-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.4-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.17.4-1"}]}]},{"source":"osv","ecosystem":"Go","package":"k8s.io/apiserver","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.15.10"}]}]},{"source":"osv","ecosystem":"Go","package":"k8s.io/apiserver","ranges":[{"type":"SEMVER","events":[{"introduced":"0.16.0"},{"fixed":"0.16.7"}]}]},{"source":"osv","ecosystem":"Go","package":"k8s.io/apiserver","ranges":[{"type":"SEMVER","events":[{"introduced":"0.17.0"},{"fixed":"0.17.3"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-202003230116.git.0.ebf9a26.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-202003230116.git.0.ebf9a26.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-202003230116.git.0.ebf9a26.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.3::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.3.9-202003230116.git.0.ebf9a26.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-enterprise-service-catalog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.11.219-1.git.1.717017c.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-enterprise-service-catalog-svcat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1:3.11.219-1.git.1.717017c.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.0.0c21387.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.0.0c21387.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.0.0c21387.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-cluster-autoscaler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.1.1ad3e34.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-descheduler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.1.7e5b9ee.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-docker-excluder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.0.0c21387.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-dockerregistry","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.1.8323991.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-excluder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.0.0c21387.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.0.0c21387.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-hypershift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.0.0c21387.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-master","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.0.0c21387.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-metrics-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.1.6fe54fb.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-node","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.0.0c21387.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-node-problem-detector","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.1.5ae8753.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-pod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.0.0c21387.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-sdn-ovs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.0.0c21387.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-service-idler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.1.958cdae.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-template-service-broker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.0.0c21387.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.0.0c21387.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"golang-github-openshift-oauth-proxy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.1.076ae14.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"golang-github-prometheus-alertmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.1.9a593f8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"golang-github-prometheus-node_exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.1.7fa9674.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"golang-github-prometheus-prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.1.3f6e657.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.0.8845382.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-docs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.0.8845382.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-playbooks","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.0.8845382.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-roles","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.0.8845382.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-ansible-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.0.8845382.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-enterprise-autoheal","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.1.c544df9.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-enterprise-cluster-capacity","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.1.ca1ee51.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-kuryr","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.1.717d59f.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-kuryr-cni","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.1.717d59f.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-kuryr-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.1.717d59f.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"openshift-kuryr-controller","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.1.717d59f.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"prometheus","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.1.3f6e657.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"prometheus-alertmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.1.9a593f8.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"prometheus-node-exporter","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.1.7fa9674.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"python2-kuryr-kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.219-1.git.1.717d59f.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el7","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.29-202004120346.git.0.d948116.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el7","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.29-202004120346.git.0.d948116.el7"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.29-202004110432.git.0.f7d02c8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.2::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.2.29-202004110432.git.0.f7d02c8.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"cri-o","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.16-0.10.dev.rhaos3.11.git1eee681.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"cri-o-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.16-0.10.dev.rhaos3.11.git1eee681.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-web-console","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.1.cc96c2d.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.0.92ee8ac.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.0.92ee8ac.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-clients-redistributable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.0.92ee8ac.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-docker-excluder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.0.92ee8ac.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-excluder","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.0.92ee8ac.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.0.92ee8ac.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-hypershift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.0.92ee8ac.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-master","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.0.92ee8ac.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-node","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.0.92ee8ac.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-pod","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.0.92ee8ac.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-sdn-ovs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.0.92ee8ac.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-template-service-broker","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.0.92ee8ac.el7"}]}],"bundled":6},{"source":"osv","ecosystem":"Red Hat:openshift:3.11::el7","package":"atomic-openshift-tests","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.11.248-1.git.0.92ee8ac.el7"}]}],"bundled":6}],"products":[{"vendor":"fedoraproject","product":"fedora"},{"vendor":"kubernetes","product":"kubernetes"}],"references":[{"url":"https://groups.google.com/forum/#%21topic/kubernetes-security-announce/2UOlsba2g0s","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://github.com/kubernetes/kubernetes/issues/89378","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","web","article","report"]},{"url":"https://security.netapp.com/advisory/ntap-20200413-0003/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/3SOCLOPTSYABTE4CLTSPDIFE6ZZZR4LX/","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8552","tags":["advisory"]},{"url":"https://github.com/kubernetes/kubernetes/pull/87669","tags":["web"]},{"url":"https://github.com/kubernetes/kubernetes/commit/5978856c4c7f10737a11c9540fe60b8475beecbb","tags":["web"]},{"url":"https://groups.google.com/forum/#!topic/kubernetes-security-announce/2UOlsba2g0s","tags":["web","article","report"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SOCLOPTSYABTE4CLTSPDIFE6ZZZR4LX/"},{"url":"https://github.com/advisories/GHSA-82hx-w2r5-c2wq"},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-8552","tags":["advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3SOCLOPTSYABTE4CLTSPDIFE6ZZZR4LX","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20200413-0003","tags":["web"]},{"url":"https://access.redhat.com/errata/RHBA-2020:0929","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1813789","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_0929.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8552","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1797909","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8552","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHBA-2020:2215","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1633506","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1691678","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1745898","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1772594","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1774184","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1803090","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1803616","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1808068","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1814722","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1814804","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1824056","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1827744","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1829492","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1830158","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1832379","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1838001","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhba-2020_2215.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:1527","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_1527.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2020:2992","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1767665","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1772280","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1795838","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1813344","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1843358","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_2992.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2019-14891","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2019-14891","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-14891","tags":["advisory"]},{"url":"https://capsule8.com/blog/oomypod-nothin-to-cri-o-bout/","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7598","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7598","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7598","tags":["advisory"]},{"url":"https://snyk.io/vuln/SNYK-JS-MINIMIST-559764","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8558","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8558","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8558","tags":["advisory"]},{"url":"https://groups.google.com/g/kubernetes-security-announce/c/B1VegbBDMTE","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-8945","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-8945","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-8945","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-10715","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-10715","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-10715","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2020-8552","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2020-8552","title":"Kubernetes API server denial of service","description":"The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.","status":"published","published":"2020-03-27T14:25:15Z","modified":"2024-08-04T10:03:46.26Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-789"],"updated_at":"2026-11-02T14:35:50.88562Z"}],"euvd":[{"id":"EUVD-2022-0898","description":"The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.","status":"published","published":"2020-03-27T14:25:15Z","modified":"2024-08-04T10:03:46Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-03T03:07:56.602123Z"}],"ghsa":[{"id":"GHSA-82hx-w2r5-c2wq","title":"Kubernetes API Server DoS Via API Requests","description":"The Kubernetes API server component in Kubernetes versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.","status":"published","published":"2022-02-15T01:57:18Z","modified":"2023-09-20T22:42:54Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-400","CWE-770","CWE-789"],"updated_at":"2026-11-02T14:37:06.234371Z"}],"nvd":[{"id":"CVE-2020-8552","description":"The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.","status":"published","published":"2020-03-27T15:15:12.757Z","modified":"2026-06-17T03:26:32.207Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":4,"vector":"AV:N/AC:L/Au:S/C:N/I:N/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-789","CWE-770"],"updated_at":"2026-11-02T14:05:56.580228Z"}],"osv":[{"id":"CVE-2020-8552","description":"The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.","status":"published","published":"2020-03-27T15:15:12.757Z","modified":"2026-10-24T10:50:39.80170988Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:17.663289Z"},{"id":"DEBIAN-CVE-2020-8552","description":"The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.","status":"published","published":"2020-03-27T15:15:12.757Z","modified":"2026-10-26T12:02:51.95971846Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:45:34.311861Z"},{"id":"GHSA-82hx-w2r5-c2wq","title":"Kubernetes API Server DoS Via API Requests","description":"The Kubernetes API server component in Kubernetes versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.","status":"published","published":"2022-02-15T01:57:18Z","modified":"2026-09-10T03:49:11.693834878Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-400","CWE-770","CWE-789"],"updated_at":"2026-11-02T15:46:41.732368Z"},{"id":"RHBA-2020:0929","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform 4.3.9 packages update","status":"published","published":"2024-09-16T03:45:26Z","modified":"2026-03-23T04:45:59.931367Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHBA-2020:2215","title":"Red Hat Bug Fix Advisory: OpenShift Container Platform 3.11 bug fix and enhancement update","status":"published","published":"2024-09-16T03:45:57Z","modified":"2026-03-23T04:46:09.019799Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2020:1527","title":"Red Hat Security Advisory: OpenShift Container Platform 4.2.29 openshift security update","status":"published","published":"2024-09-16T03:45:41Z","modified":"2026-03-23T04:46:09.50651Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"RHSA-2020:2992","title":"Red Hat Security Advisory: OpenShift Container Platform 3.11 security update","status":"published","published":"2024-09-16T04:36:16Z","modified":"2026-10-09T10:01:50Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:07.072948Z"},{"id":"UBUNTU-CVE-2020-8552","description":"The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via successful API requests.","status":"withdrawn","published":"2020-03-27T15:15:00Z","modified":"2025-07-14T06:45:30.297995Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"medium"},{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T15:54:25.728622Z"}]}}