Exploitation Summary
EIP tracks 2 public exploits for CVE-2020-8558. PoCs published by tabbysable, rhysemmas.
AI-analyzed exploit summary The repository provides a detailed technical analysis of CVE-2020-8558, a Kubernetes vulnerability where kube-proxy's setting of `net.ipv4.conf.all.route_localnet=1` exposes localhost-bound services to network access. It includes a Dockerfile for testing and Python scripts for PoC, but the primary content is a thorough writeup explaining the root cause, impact, and mitigation strategies.
Description
The Kubelet and kube-proxy components in versions 1.1.0-1.16.10, 1.17.0-1.17.6, and 1.18.0-1.18.3 were found to contain a security issue which allows adjacent hosts to reach TCP and UDP services bound to 127.0.0.1 running on the node or in the node's network namespace. Such a service is generally thought to be reachable only by other processes on the same host, but due to this defeect, could be reachable by other hosts on the same LAN as the node, or by containers running on the same node as the service.
Exploits (2)
The repository provides a detailed technical analysis of CVE-2020-8558, a Kubernetes vulnerability where kube-proxy's setting of `net.ipv4.conf.all.route_localnet=1` exposes localhost-bound services to network access. It includes a Dockerfile for testing and Python scripts for PoC, but the primary content is a thorough writeup explaining the root cause, impact, and mitigation strategies.
This repository contains a functional Python-based exploit for CVE-2020-8558, which leverages martian packets to bypass kube-proxy firewall rules in Kubernetes. The exploit crafts raw TCP/IP packets to target the unauthenticated kube-apiserver on port 8080, creating a malicious pod as proof of exploitation.
References (3)
Scores
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N