CVEs-PoC/2020/CVE-2020-8557.md

### [CVE-2020-8557](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8557)
![](https://img.shields.io/static/v1?label=Product&message=Kubernetes&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=1.18%3C%201.18.6%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-400%20Uncontrolled%20Resource%20Consumption&color=brighgreen)

### Description

The Kubernetes kubelet component in versions 1.1-1.16.12, 1.17.0-1.17.8 and 1.18.0-1.18.5 do not account for disk usage by a pod which writes to its own /etc/hosts file. The /etc/hosts file mounted in a pod by kubelet is not included by the kubelet eviction manager when calculating ephemeral storage usage by a pod. If a pod writes a large amount of data to the /etc/hosts file, it could fill the storage space of the node and cause the node to fail.

### POC

#### Reference
- https://hackerone.com/reports/867699

#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/Kiranp295/CKS
- https://github.com/Live-Hack-CVE/CVE-2020-8557
- https://github.com/Metarget/metarget
- https://github.com/SebastianUA/Certified-Kubernetes-Security-Specialist
- https://github.com/adavarski/HomeLab-Proxmox-k8s-DevSecOps-playground
- https://github.com/adavarski/HomeLab-k8s-DevSecOps-playground
- https://github.com/ashrafulislamcs/-Certified-Kubernetes-Security-Specialist
- https://github.com/neargle/my-re0-k8s-security
- https://github.com/orgTestCodacy11KRepos110MB/repo-3574-my-re0-k8s-security
- https://github.com/walidshaari/Certified-Kubernetes-Security-Specialist