cve/2020/CVE-2020-8557.md

CVE-2020-8557

Description

The Kubernetes kubelet component in versions 1.1-1.16.12, 1.17.0-1.17.8 and 1.18.0-1.18.5 do not account for disk usage by a pod which writes to its own /etc/hosts file. The /etc/hosts file mounted in a pod by kubelet is not included by the kubelet eviction manager when calculating ephemeral storage usage by a pod. If a pod writes a large amount of data to the /etc/hosts file, it could fill the storage space of the node and cause the node to fail.

POC

Reference

• https://hackerone.com/reports/867699

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/Kiranp295/CKS
• https://github.com/Live-Hack-CVE/CVE-2020-8557
• https://github.com/Metarget/metarget
• https://github.com/SebastianUA/Certified-Kubernetes-Security-Specialist
• https://github.com/adavarski/HomeLab-Proxmox-k8s-DevSecOps-playground
• https://github.com/adavarski/HomeLab-k8s-DevSecOps-playground
• https://github.com/ashrafulislamcs/-Certified-Kubernetes-Security-Specialist
• https://github.com/neargle/my-re0-k8s-security
• https://github.com/orgTestCodacy11KRepos110MB/repo-3574-my-re0-k8s-security
• https://github.com/walidshaari/Certified-Kubernetes-Security-Specialist