Lucene search
Redhat.comRH:CVE-2019-11254HistoryApr 01, 2020 - 12:32 a.m.
CVE-2019-11254
2020-04-0100:32:01
redhat.com
access.redhat.com
13
0.001 Low
EPSS
Percentile
42.9%
The Kubernetes API Server component in versions 1.1-1.14, and versions prior to 1.15.10, 1.16.7 and 1.17.3 allows an authorized user who sends malicious YAML payloads to cause the kube-apiserver to consume excessive CPU cycles while parsing YAML.
Mitigation
Prevent unauthenticated or unauthorized access to the API server
Related
nessus
nessus
Oracle Linux 7 : olcne / kubernetes (ELSA-2020-5653)
2023-09-07 00:00:00
Kubernetes < 1.15.10 / 1.16.x < 1.16.7 / 1.17.x < 1.17.3 DoS
2020-09-08 00:00:00
RHEL 7 : OpenShift Container Platform 3.11 atomic-openshift (RHSA-2020:2479)
2020-06-19 00:00:00
osv
osv
CVE-2019-11254
2020-04-01 21:15:13
Excessive Platform Resource Consumption within a Loop in Kubernetes
2021-12-20 16:55:06
Excessive resource consumption in YAML parsing in gopkg.in/yaml.v2
2021-04-14 20:04:52
ibm
ibm
debiancve
debiancve
CVE-2019-11254
2020-04-01 21:15:13
veracode
veracode
Denial Of Service (DoS)
2020-04-02 03:17:51
prion
prion
Code injection
2020-04-01 21:15:00
cgr
cgr
CVE-2019-11254 vulnerabilities
2024-05-19 03:07:16
wolfi
wolfi
CVE-2019-11254 vulnerabilities
2024-07-05 21:08:40
ubuntucve
ubuntucve
CVE-2019-11254
2020-04-01 00:00:00
cve
cve
CVE-2019-11254
2020-04-01 21:15:13
gitlab
gitlab
Excessive Platform Resource Consumption within a Loop in Kubernetes
2021-12-20 00:00:00
nvd
nvd
CVE-2019-11254
2020-04-01 21:15:13
broadcom
broadcom
github
github
Excessive Platform Resource Consumption within a Loop in Kubernetes
2021-12-20 16:55:06
cvelist
cvelist
redhat
redhat
oraclelinux
oraclelinux
olcne kubernetes security update
2020-04-17 00:00:00
kubernetes-cni-plugins kubernetes-cni kubernetes olcne security update
2020-06-12 00:00:00
