Azure Kubernetes Service: Node disk DOS by writing to container /etc/hosts (CVE-2020-8557)

Microsoft announced general availability of this Azure Kubernetes Service (AKS) update in September 2020.

1 version

Facts

Microsoft id
azure-kubernetes-service-node-disk-dos-by-writing-to-container-etchosts-cve20208557
Products
Azure Kubernetes Service (AKS)
Update type
Security
Product categories
Compute, Containers
General availability
September 2020
Status pages
Azure Kubernetes Service (AKS) status
First captured by us
(from our first import of this list)
Microsoft last modified
Source
Azure Updates · open the original at Microsoft

Microsoft says

The /etc/hosts file mounted in a pod by kubelet is not included by the kubelet eviction manager when calculating ephemeral storage usage by a pod.

Azure Updates,

Read Microsoft's full post

What Microsoft changed

One version so far. If Microsoft edits it, each change shows here with what was removed and added.

  1. First version we captured ·

    The text as we first saw it

    Seen by us · Microsoft's timestamp · Microsoft's page

Other changes for Azure Kubernetes Service (AKS)

Last updated