Lucene search
RedHatRHSA-2019:3132HistoryOct 16, 2019 - 3:24 p.m.
(RHSA-2019:3132) Important: OpenShift Container Platform 4.1.20 openshift security update
2019-10-1615:24:10
access.redhat.com
80
0.019 Low
EPSS
Percentile
88.6%
Red Hat OpenShift Container Platform is Red Hat’s cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
This advisory contains the openshift RPM package for Red Hat
OpenShift Container Platform 4.1.20.
Security Fix(es):
- kubernetes: YAML parsing vulnerable to “Billion Laughs” attack, allowing for remote denial of service (CVE-2019-11253)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 7 | x86_64 | openshift-hyperkube | < 4.1.20-201910101746.git.0.a80aad5.el7 | openshift-hyperkube-4.1.20-201910101746.git.0.a80aad5.el7.x86_64.rpm |
| RedHat | 7 | x86_64 | openshift-clients | < 4.1.20-201910101746.git.0.a80aad5.el7 | openshift-clients-4.1.20-201910101746.git.0.a80aad5.el7.x86_64.rpm |
| RedHat | 7 | x86_64 | openshift-clients-redistributable | < 4.1.20-201910101746.git.0.a80aad5.el7 | openshift-clients-redistributable-4.1.20-201910101746.git.0.a80aad5.el7.x86_64.rpm |
| RedHat | 8 | x86_64 | openshift-hyperkube | < 4.1.20-201910101746.git.0.a80aad5.el8 | openshift-hyperkube-4.1.20-201910101746.git.0.a80aad5.el8.x86_64.rpm |
| RedHat | 8 | x86_64 | openshift-clients-redistributable | < 4.1.20-201910101746.git.0.a80aad5.el8 | openshift-clients-redistributable-4.1.20-201910101746.git.0.a80aad5.el8.x86_64.rpm |
| RedHat | 8 | x86_64 | openshift-clients | < 4.1.20-201910101746.git.0.a80aad5.el8 | openshift-clients-4.1.20-201910101746.git.0.a80aad5.el8.x86_64.rpm |
Related
osv
osv
Kubernetes apimachinery packages vulnerable to unbounded recursion in JSON or YAML parsing
2023-02-08 00:35:27
CVE-2019-11253
2019-10-17 16:15:10
Unbounded recursion in JSON parsing in k8s.io/apimachinery
2022-09-02 21:12:51
alpinelinux
alpinelinux
CVE-2019-11253
2019-10-17 16:15:10
redhat
redhat
nessus
nessus
gitlab
gitlab
attackerkb
attackerkb
Kubectl/API Server YAML parsing vulnerable to "Billion Laughs" Attack
2019-10-17 00:00:00
nvd
nvd
CVE-2019-11253
2019-10-17 16:15:10
ibm
ibm
Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2019-11253)
2019-10-25 16:46:16
Security Bulletin: IBM API Connect is impacted by a vulnerability in Kubernetes(CVE-2019-11253)
2020-01-02 17:44:12
Security Bulletin: Open Source Security issues for NPS service provider
2020-12-11 07:12:00
github
github
prion
prion
Input validation
2019-10-17 16:15:00
symantec
symantec
Kubernetes API Server CVE-2019-11253 Denial of Service Vulnerability
2019-09-27 00:00:00
ubuntucve
ubuntucve
CVE-2019-11253
2019-10-17 00:00:00
redhatcve
redhatcve
CVE-2019-11253
2019-10-02 08:51:08
checkpoint_advisories
checkpoint_advisories
Kubernetes API Server Denial Of Service (CVE-2019-11253)
2019-12-26 00:00:00
cve
cve
CVE-2019-11253
2019-10-17 16:15:10
cvelist
cvelist
veracode
veracode
Denial Of Service (DoS)
2019-10-02 02:49:42
debiancve
debiancve
CVE-2019-11253
2019-10-17 16:15:10
threatpost
threatpost
ThreatList: One-Third of Firms Say Their Container Security Lags
2018-11-23 13:00:48
Dangerous Kubernetes Bugs Allow Authentication Bypass, DoS
2019-10-17 14:25:39
Public Bug Bounty Takes Aim at Kubernetes Container Project
2020-01-14 17:00:28
photon
photon
Important Photon OS Security Update - PHSA-2019-0031
2019-09-27 00:00:00
Critical Photon OS Security Update - PHSA-2019-0184
2019-10-23 00:00:00
Important Photon OS Security Update - PHSA-2019-3.0-0031
2019-09-28 00:00:00
oraclelinux
oraclelinux
kubernetes security update
2020-01-31 00:00:00
kubernetes kubeadm-ha-setup kubeadm-upgrade security update
2020-04-17 00:00:00
kitploit
kitploit