CVE-2025-0426
MEDIUMKubernetes 1.32.0-1.32.1, 1.31.0-1.31.5, 1.30.0-1.30.9 - DoS via Container Checkpoint Requests
Title source: llmDescription
A security issue was discovered in Kubernetes where a large number of container checkpoint requests made to the unauthenticated kubelet read-only HTTP endpoint may cause a Node Denial of Service by filling the Node's disk.
References (3)
Core 3
Core References
Issue Tracking issue-tracking
https://github.com/kubernetes/kubernetes/issues/130016
Mailing List mailing-list
https://groups.google.com/g/kubernetes-security-announce/c/KiODfu8i6w8
Scores
CVSS v3
6.2
EPSS
0.0035
EPSS Percentile
26.6%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-400
Status
published
Products (7)
k8s.io/kubernetes
1.32.0 - 1.32.2Go
Kubernetes/kubelet
1.30.0 - 1.30.9
Kubernetes/kubelet
1.30.10
Kubernetes/kubelet
1.31.0 - 1.31.5
Kubernetes/kubelet
1.31.6
Kubernetes/kubelet
1.32.0 - 1.32.1
Kubernetes/kubelet
1.32.2
Published
Feb 13, 2025
Tracked Since
Feb 18, 2026