Lucene search
RedHatRHSA-2020:2870HistoryJul 07, 2020 - 9:08 p.m.
(RHSA-2020:2870) Important: Red Hat OpenShift Service Mesh 1.0 servicemesh-cni security update
2020-07-0721:08:32
access.redhat.com
55
0.019 Low
EPSS
Percentile
88.6%
Red Hat OpenShift Service Mesh is Red Hat’s distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation.
Security Fix(es):
- kubernetes: YAML parsing vulnerable to “Billion Laughs” attack, allowing for remote denial of service (CVE-2019-11253)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 8 | x86_64 | servicemesh-cni | < 1.0.11-1.el8 | servicemesh-cni-1.0.11-1.el8.x86_64.rpm |
Related
osv
osv
Kubernetes apimachinery packages vulnerable to unbounded recursion in JSON or YAML parsing
2023-02-08 00:35:27
CVE-2019-11253
2019-10-17 16:15:10
Unbounded recursion in JSON parsing in k8s.io/apimachinery
2022-09-02 21:12:51
alpinelinux
alpinelinux
CVE-2019-11253
2019-10-17 16:15:10
redhat
redhat
nessus
nessus
gitlab
gitlab
attackerkb
attackerkb
Kubectl/API Server YAML parsing vulnerable to "Billion Laughs" Attack
2019-10-17 00:00:00
nvd
nvd
CVE-2019-11253
2019-10-17 16:15:10
github
github
ibm
ibm
Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2019-11253)
2019-10-25 16:46:16
Security Bulletin: IBM API Connect is impacted by a vulnerability in Kubernetes(CVE-2019-11253)
2020-01-02 17:44:12
Security Bulletin: Open Source Security issues for NPS service provider
2020-12-11 07:12:00
ubuntucve
ubuntucve
CVE-2019-11253
2019-10-17 00:00:00
prion
prion
Input validation
2019-10-17 16:15:00
symantec
symantec
Kubernetes API Server CVE-2019-11253 Denial of Service Vulnerability
2019-09-27 00:00:00
debiancve
debiancve
CVE-2019-11253
2019-10-17 16:15:10
redhatcve
redhatcve
CVE-2019-11253
2019-10-02 08:51:08
checkpoint_advisories
checkpoint_advisories
Kubernetes API Server Denial Of Service (CVE-2019-11253)
2019-12-26 00:00:00
cvelist
cvelist
cve
cve
CVE-2019-11253
2019-10-17 16:15:10
veracode
veracode
Denial Of Service (DoS)
2019-10-02 02:49:42
threatpost
threatpost
ThreatList: One-Third of Firms Say Their Container Security Lags
2018-11-23 13:00:48
Dangerous Kubernetes Bugs Allow Authentication Bypass, DoS
2019-10-17 14:25:39
Public Bug Bounty Takes Aim at Kubernetes Container Project
2020-01-14 17:00:28
photon
photon
Important Photon OS Security Update - PHSA-2019-0031
2019-09-27 00:00:00
Critical Photon OS Security Update - PHSA-2019-0184
2019-10-23 00:00:00
Important Photon OS Security Update - PHSA-2019-3.0-0031
2019-09-28 00:00:00
oraclelinux
oraclelinux
kubernetes security update
2020-01-31 00:00:00
kubernetes kubeadm-ha-setup kubeadm-upgrade security update
2020-04-17 00:00:00
kitploit
kitploit