Lucene search
RedHatRHSA-2020:2795HistoryJul 01, 2020 - 6:27 p.m.
(RHSA-2020:2795) Important: Red Hat OpenShift Service Mesh 1.1 servicemesh-operator security update
2020-07-0118:27:53
access.redhat.com
46
0.019 Low
EPSS
Percentile
88.6%
Red Hat OpenShift Service Mesh is Red Hat’s distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation.
Security Fix(es):
-
kubernetes: YAML parsing vulnerable to “Billion Laughs” attack, allowing for remote denial of service (CVE-2019-11253)
-
openshift-service-mesh/istio-rhel8-operator: control plane can deploy gateway image to any namespace (CVE-2020-14306)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | x86_64 | servicemesh-operator | < 1.1.4-3.el8 | servicemesh-operator-1.1.4-3.el8.x86_64.rpm |
Related
nessus
nessus
osv
osv
CVE-2020-14306
2020-09-16 18:15:13
Kubernetes apimachinery packages vulnerable to unbounded recursion in JSON or YAML parsing
2023-02-08 00:35:27
Unbounded recursion in JSON parsing in k8s.io/apimachinery
2022-09-02 21:12:51
cvelist
cvelist
CVE-2020-14306
2020-09-16 00:00:00
redhatcve
redhatcve
CVE-2020-14306
2020-06-30 22:21:11
CVE-2019-11253
2019-10-02 08:51:08
veracode
veracode
Incorrect Access Control Restrictions
2020-07-02 03:12:28
Denial Of Service (DoS)
2019-10-02 02:49:42
cve
cve
CVE-2020-14306
2020-09-16 18:15:13
CVE-2019-11253
2019-10-17 16:15:10
prion
prion
Improper access control
2020-09-16 18:15:00
Input validation
2019-10-17 16:15:00
nvd
nvd
CVE-2020-14306
2020-09-16 18:15:13
CVE-2019-11253
2019-10-17 16:15:10
alpinelinux
alpinelinux
CVE-2019-11253
2019-10-17 16:15:10
redhat
redhat
gitlab
gitlab
attackerkb
attackerkb
Kubectl/API Server YAML parsing vulnerable to "Billion Laughs" Attack
2019-10-17 00:00:00
ibm
ibm
Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2019-11253)
2019-10-25 16:46:16
Security Bulletin: IBM API Connect is impacted by a vulnerability in Kubernetes(CVE-2019-11253)
2020-01-02 17:44:12
Security Bulletin: Open Source Security issues for NPS service provider
2020-12-11 07:12:00
github
github
symantec
symantec
Kubernetes API Server CVE-2019-11253 Denial of Service Vulnerability
2019-09-27 00:00:00
ubuntucve
ubuntucve
CVE-2019-11253
2019-10-17 00:00:00
checkpoint_advisories
checkpoint_advisories
Kubernetes API Server Denial Of Service (CVE-2019-11253)
2019-12-26 00:00:00
debiancve
debiancve
CVE-2019-11253
2019-10-17 16:15:10
threatpost
threatpost
ThreatList: One-Third of Firms Say Their Container Security Lags
2018-11-23 13:00:48
Dangerous Kubernetes Bugs Allow Authentication Bypass, DoS
2019-10-17 14:25:39
Public Bug Bounty Takes Aim at Kubernetes Container Project
2020-01-14 17:00:28
photon
photon
Important Photon OS Security Update - PHSA-2019-0031
2019-09-27 00:00:00
Critical Photon OS Security Update - PHSA-2019-0184
2019-10-23 00:00:00
Important Photon OS Security Update - PHSA-2019-3.0-0031
2019-09-28 00:00:00
oraclelinux
oraclelinux
kubernetes security update
2020-01-31 00:00:00
kubernetes kubeadm-ha-setup kubeadm-upgrade security update
2020-04-17 00:00:00
kitploit
kitploit