6.2
CVE-2025-0426
- EPSS 0.04%
- Veröffentlicht 13.02.2025 16:16:48
- Zuletzt bearbeitet 15.04.2026 00:35:42
- Quelle jordan@liggitt.net
- CVE-Watchlists
- Unerledigt
A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerKubernetes
≫
Produkt
kubelet
Default Statusunaffected
Version <=
1.32.1
Version
1.32.0
Status
affected
Version <=
1.31.5
Version
1.31.0
Status
affected
Version <=
1.30.9
Version
1.30.0
Status
affected
Version
1.32.2
Status
unaffected
Version
1.31.6
Status
unaffected
Version
1.30.10
Status
unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.04% | 0.118 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| jordan@liggitt.net | 6.2 | 2.5 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
CWE-400 Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.