Strix
26.1K

CVE-2020-8558

HIGHCVSS 8.8/10EPSS 3.60%

Last modified

CVE-2020-8558 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain a security issue which allows adjacent hosts to reach TCP and UDP services bound to 127.0.0.1 running on the node or in the node's network namespace. Such a service is generally thought to be reachable only by other processes on the same host, but due to this defeect, could be reachable by other hosts on the same LAN as the node, or by containers running on the same node as the service.. EPSS estimates a 3.60% chance of exploitation in the next 30 days.

Description

The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain a security issue which allows adjacent hosts to reach TCP and UDP services bound to 127.0.0.1 running on the node or in the node's network namespace. Such a service is generally thought to be reachable only by other processes on the same host, but due to this defeect, could be reachable by other hosts on the same LAN as the node, or by containers running on the same node as the service.

Metrics

CVSS 3.1
8.8/10

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Probability
3.60%

88.0th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

Affected Software

VendorProductVersions
KubernetesKubernetes>= 1.1.0, <= 1.16.10
KubernetesKubernetes>= 1.17.0, <= 1.17.6
KubernetesKubernetes>= 1.18.0, <= 1.18.3

References

Timeline

Published
Last Modified
Status
Modified

Frequently Asked Questions

What is CVE-2020-8558?
The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain a security issue which allows adjacent hosts to reach TCP and UDP services bound to 127.0.0.1 running on the node or in the node's network namespace. Such a service is generally thought to be reachable only by other processes on the same host, but due to this defeect, could be reachable by other hosts on the same LAN as the node, or by containers running on the same node as the service.
How severe is CVE-2020-8558?
CVE-2020-8558 has a CVSS score of 8.8/10 (HIGH severity). The EPSS model estimates a 3.60% probability of exploitation in the next 30 days.
How do I fix CVE-2020-8558?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

Are you affected by CVE-2020-8558?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST