Database/Container, Kubernetes & orchestration

Kubernetes (kubelet): Kubelet API DoS, including via the unauthenticated read-only port

CVSS 4.3CVE-2020-8551Container, Kubernetes & orchestrationcurated

Impact

Kubelet API DoS, including via the unauthenticated read-only port

Who can reach it

Any pod on the cluster network

What to do

Rolling kubelet upgrade with node drain; disable the read-only port (10255)

References

https://nvd.nist.gov/vuln/detail/CVE-2020-8551

Related entries

Kubernetes (kubelet): Pods with an empty localhost seccomp profile field silently bypass seccomp enforcementCVE-2023-2431 · Kubernetes (kubelet)Low
Kubernetes (kubelet): subPath volume mount symlink race gives access to host files and directories outside the volumeCVE-2021-25741 · Kubernetes (kubelet)High
Kubernetes (kubelet): /debug/pprof exposed on the unauthenticated kubelet healthz portCVE-2019-11248 · Kubernetes (kubelet)High
Kubernetes (kubelet): Arbitrary command execution on the node via a gitRepo volumeCVE-2024-10220 · Kubernetes (kubelet)High
Kubernetes (kubelet): Windows workloads run as ContainerAdministrator despite runAsNonRootCVE-2021-25749 · Kubernetes (kubelet)High
Kubernetes (kubelet): gitRepo volume grants inadvertent access to local repositories on the nodeCVE-2025-1767 · Kubernetes (kubelet)Medium

All Container, Kubernetes & orchestration entries

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.