Description (CNA)
A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Kubernetes / kubelet | affected 1.32.0 through 1.32.1; affected 1.31.0 through 1.31.5; affected 1.30.0 through 1.30.9; unaffected 1.32.2; unaffected 1.31.6; unaffected 1.30.10 |
CWE
CWE-400
References
- https://github.com/kubernetes/kubernetes/issues/130016
- https://groups.google.com/g/kubernetes-security-announce/c/KiODfu8i6w8
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.