CVE-2020-8558: kubernetes

csirt@kutim:~/threat-intel/cve/CVE-2020-8558

CVSS 8.8 · High EPSS 3,6%

Kerentanan Unprotected Alternate Channel pada kubernetes. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain a security issue which allows adjacent hosts to reach TCP and UDP services bound to 127.0.0.1 running on the node or in the node's network namespace. Such a service is generally thought to be reachable only by other processes on the same host, but due to this defeect, could be reachable by other hosts on the same LAN as the node, or by containers running on the same node as the service.

Rincian

Terbit di NVD: 27 Juli 2020
Terakhir diubah: 17 Juni 2026
Status NVD: Modified
CVSS 3.1: 8.8 (High), sumber NVD
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-420: Unprotected Alternate Channel
EPSS (30 hari): 3,6% peluang dieksploitasi; lebih tinggi dari 89,2% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
kubernetes	kubernetes	Versi 1.1.0 hingga 1.16.10
kubernetes	kubernetes	Versi 1.17.0 hingga 1.17.6
kubernetes	kubernetes	Versi 1.18.0 hingga 1.18.3

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://github.com/kubernetes/kubernetes/issues/92315 exploit · mitigasi · patch · advisory pihak ketiga
https://groups.google.com/g/kubernetes-announce/c/sI4KmlH3S2I/m/TljjxOBvBQAJ exploit · mailing list · mitigasi · advisory pihak ketiga
https://security.netapp.com/advisory/ntap-20200821-0001/ advisory pihak ketiga

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.