CVE-2025-0426CWE-400
A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint…
Medium · published February 13, 2025
What it is
A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk.
The record
Technical detail
- CVSS v3.1
- 6.2 · MEDIUM
- Vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00372 · 29.9th percentile
- Weakness
- CWE-400 · Uncontrolled Resource Consumption
- Published
- 2025-02-13T15:16Z
EPSS history
Timeline