CVE-2020-8551: Fedoraproject Fedora

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

The Kubelet component in versions 1.15.0-1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attack via the kubelet API, including the unauthenticated HTTP read-only API typically served on port 10255, and the authenticated HTTPS API typically served on port 10250.

Affected products

• Fedoraproject Fedora: version 32 only
• Kubernetes Kubernetes: from 1.15.0, up to and including 1.15.9; from 1.16.0, up to and including 1.16.6; from 1.17.0, up to and including 1.17.2

Published 2020-03-27. Last modified 2026-06-17.