Published: 01/04/2019 Updated: 07/11/2023

CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 358

Vector: AV:N/AC:L/Au:S/C:N/I:N/A:P

In all Kubernetes versions prior to v1.11.8, v1.12.6, and v1.13.4, users that are authorized to make patch requests to the Kubernetes API Server can send a specially crafted patch of type "json-patch" (e.g. `kubectl patch --type json` or `"Content-Type: application/json-patch+json"`) that consumes excessive resources while processing, causing a Denial of Service on the API Server.

Vulnerable Product	Search on Vulmon	Subscribe to Product
kubernetes kubernetes
redhat openshift container platform 3.11
redhat openshift container platform 3.10

Debian Bug report logs - #923686 kubernetes: CVE-2019-1002100: kube-apiserver: DoS with crafted patch of type json-patch Package: src:kubernetes; Maintainer for src:kubernetes is Dmitry Smirnov <onlyjob@debianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Sun, 3 Mar 2019 20:57:02 UTC Severity: gr ...

Synopsis Moderate: OpenShift Container Platform 311 security update Type/Severity Security Advisory: Moderate Topic An update for atomic-openshift and jenkins-2-plugins is now available forRed Hat OpenShift Container Platform 311Red Hat Product Security has rated this update as having a security impactof ...

Synopsis Important: OpenShift Container Platform 310 atomic-openshift security update Type/Severity Security Advisory: Important Topic An update for atomic-openshift is now available for Red Hat OpenShift Container Platform 310Red Hat Product Security has rated this update as having a security impact of ...

Impact: Moderate Public Date: 2019-02-28 CWE: CWE-20 Bugzilla: 1683190: CVE-2019-1002100 kube-apiserver ...

AWS Kubernetes AWS Kubernetes is a Kubernetes cluster deployed using Kubeadm tool It provides full integration with AWS It is able to handle ELB load balancers, EBS disks, Route53 domains etc AWS Kubernetes Updates Prerequisites and dependencies Including the module Addons Custom addons Tagging Updates 332020 Update to Kubernetes 1173, update addons and Calico SD

kubernetes test play ground

AWS Kubernetes AWS Kubernetes is a Kubernetes cluster deployed using Kubeadm tool It provides full integration with AWS It is able to handle ELB load balancers, EBS disks, Route53 domains etc AWS Kubernetes Updates Prerequisites and dependencies Including the module Addons Custom addons Tagging Updates 1742019 Update to Kubernetes 1141 3132019 Update to Kuberne

terraform-aws-minikube

AWS Minikube Terraform module AWS Minikube is a single node Kubernetes deployment in AWS It creates EC2 host and deploys Kubernetes cluster using Kubeadm tool It provides full integration with AWS It is able to handle ELB load balancers, EBS disks, Route53 domains etc Updates Prerequisites and dependencies Including the module Using custom AMI Image Addons Custom addons T

terraform-aws-k8s

AWS Kubernetes AWS Kubernetes is a Kubernetes cluster deployed using Kubeadm tool It provides full integration with AWS It is able to handle ELB load balancers, EBS disks, Route53 domains etc AWS Kubernetes Updates Prerequisites and dependencies Including the module Addons Custom addons Tagging Updates 1742019 Update to Kubernetes 1141 3132019 Update to Kuberne

AWS Kubernetes AWS Kubernetes is a Kubernetes cluster deployed using Kubeadm tool It provides full integration with AWS It is able to handle ELB load balancers, EBS disks, Route53 domains etc AWS Kubernetes Updates Prerequisites and dependencies Including the module Addons Custom addons Tagging Updates 24112020 Update to Kubernetes 1194 18102020 Update to Kuber

CWE-770 https://github.com/kubernetes/kubernetes/issues/74534 http://www.securityfocus.com/bid/107290 https://security.netapp.com/advisory/ntap-20190416-0002/https://access.redhat.com/errata/RHSA-2019:1851 https://access.redhat.com/errata/RHSA-2019:3239 https://groups.google.com/forum/#%21topic/kubernetes-announce/vmUUNkYfG9g https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=923686 https://nvd.nist.gov https://github.com/saipasham/kub_test-https://access.redhat.com/security/cve/cve-2019-1002100

CVE-2019-1002100

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Github Repositories

References

Vulmon Search

About

Products

Connect