Published: 17/10/2019 Updated: 07/11/2023

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 448

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memory, potentially crashing and becoming unavailable. Prior to v1.14.0, default RBAC policy authorized anonymous users to submit requests that could trigger this vulnerability. Clusters upgraded from a version prior to v1.14.0 keep the more permissive policy by default for backwards compatibility.

Vulnerable Product	Search on Vulmon	Subscribe to Product
kubernetes kubernetes
redhat openshift container platform 3.9
redhat openshift container platform 3.11
redhat openshift container platform 3.10

Synopsis Important: Red Hat OpenShift Service Mesh 11 servicemesh-operator security update Type/Severity Security Advisory: Important Topic An update for servicemesh-operator is now available for OpenShift Service Mesh 11Red Hat Product Security has rated this update as having a security impact of Import ...

Synopsis Important: Red Hat OpenShift Service Mesh 10 servicemesh-cni security update Type/Severity Security Advisory: Important Topic An update for servicemesh-cni is now available for OpenShift Service Mesh 10Red Hat Product Security has rated this update as having a security impact of Important A Com ...

Synopsis Important: OpenShift Container Platform 311 atomic-openshift security update Type/Severity Security Advisory: Important Topic An update for atomic-openshift is now available for Red Hat OpenShiftContainer Platform 311Red Hat Product Security has rated this update as having a security impact of I ...

Synopsis Important: Red Hat OpenShift Service Mesh servicemesh-cni security update Type/Severity Security Advisory: Important Topic An update for servicemesh-cni is now available for OpenShift Service Mesh 11Red Hat Product Security has rated this update as having a security impact of Important A Common ...

Synopsis Important: OpenShift Container Platform 4120 openshift security update Type/Severity Security Advisory: Important Topic An update for openshift is now available for Red Hat OpenShift Container Platform 41Red Hat Product Security has rated this update as having a security impact of Important A ...

Synopsis Important: Red Hat OpenShift Service Mesh 10 servicemesh-prometheus security update Type/Severity Security Advisory: Important Topic An update for servicemesh-prometheus is now available for OpenShift Service Mesh 10Red Hat Product Security has rated this update as having a security impact of Im ...

Synopsis Important: OpenShift Container Platform 310 atomic-openshift security update Type/Severity Security Advisory: Important Topic An update for atomic-openshift is now available for Red Hat OpenShift Container Platform 310Red Hat Product Security has rated this update as having a security impact of ...

Synopsis Important: Red Hat OpenShift Service Mesh 10 servicemesh-grafana security update Type/Severity Security Advisory: Important Topic An update for servicemesh-grafana is now available for OpenShift Service Mesh 10Red Hat Product Security has rated this update as having a security impact of Importan ...

Synopsis Moderate: Release of containers for OSP 162z director operator tech preview Type/Severity Security Advisory: Moderate Topic Red Hat OpenStack Platform 162 (Train) director Operator containers areavailable for technology preview Description Release osp-director-operator imagesSecurity Fix(es): golang: kubernetes: YAML parsing v ...

Synopsis Important: OpenShift Container Platform 39 atomic-openshift security update Type/Severity Security Advisory: Important Topic An update for atomic-openshift is now available for Red Hat OpenShiftContainer Platform 39Red Hat Product Security has rated this update as having a security impact of Imp ...

Übersicht Important: Red Hat OpenShift Service Mesh servicemesh-grafana security update Typ/Schweregrad Security Advisory: Important Thema An update for servicemesh-grafana is now available for OpenShift Service Mesh 11Red Hat Product Security has rated this update as having a security impact of Importan ...

Kubecon 2021: A largely dry and corporate affair where the best bits involved a spot of Kubernetes-hacking roleplay

The Register • Tim Anderson • 10 May 2021

But we heard the message loud and clear – it's pretty much the standard runtime platform now

Kubecon A session on how to hack into a Kubernetes cluster was among the highlights of a Kubecon where the main events were generally bland and corporate affairs, perhaps indicative of the technology now being a de facto infrastructure standard among enterprises. Kubecon Europe took place online last week with more than 27,000 attendees, according to Chris Aniszczyk, CTO of the Cloud Native Computing Foundation (CNCF), which hosts the Kubernetes project among many others. That is a substantial i...

CVE-2019-11253

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Recent Articles

References

Vulmon Search

About

Products

Connect