Kubernetes: Schwachstelle ermöglicht Denial of Service

Summary

Product

Vulnerabilities 1

• Medium 6.2
  CVE-2025-0426

  Node Denial of Service via kubelet Checkpoint API

  A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk.

  Kubernetes Kubelet argocd-image-updater spark-operator Debian Azure Linux Alpine Wolfi Go
  Feb 13, 2025

Revision history

1. 2025-03-10 #4

   Neue Updates von Red Hat aufgenommen

2. 2025-02-24 #3

   Neue Updates von Red Hat aufgenommen

3. 2025-02-19 #2

   Neue Updates von openSUSE aufgenommen

4. 2025-02-13 #1

   Initiale Fassung

References

• Red Hat Bugtracker #2345617 vom 2025-02-13
  https://bugzilla.redhat.com/show_bug.cgi?id=2345617
• openSUSE Security Update OPENSUSE-SU-2025:14816-1 vom 2025-02-19
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/HVLTJNJPEGU2DCAJLIIBYKLU7UOJMWAM/
• openSUSE Security Update OPENSUSE-SU-2025:14816-1 vom 2025-02-19
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/HVLTJNJPEGU2DCAJLIIBYKLU7UOJMWAM/
• openSUSE Security Update OPENSUSE-SU-2025:14817-1 vom 2025-02-19
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/VC47IT6HI2EOF2DYFGJEOXVSSLKSYM27/
• openSUSE Security Update OPENSUSE-SU-2025:14819-1 vom 2025-02-19
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/LU7UPFBK7ZL3VHVCRW6EAIHHNKG4IV4P/
• openSUSE Security Update OPENSUSE-SU-2025:14818-1 vom 2025-02-19
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/NLT2TDT4NRBNJSRG4AYQUFQWPHTQKM4K/
• openSUSE Security Update OPENSUSE-SU-2025:14819-1 vom 2025-02-19
  https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/message/LU7UPFBK7ZL3VHVCRW6EAIHHNKG4IV4P/
• Red Hat Security Advisory RHSA-2025:1824 vom 2025-02-25
  https://access.redhat.com/errata/RHSA-2025:1824
• Red Hat Security Advisory RHSA-2025:2652 vom 2025-03-11
  https://access.redhat.com/errata/RHSA-2025:2652