271 matches found
Design/Logic Flaw
In certain conditions for Calico Typha v3.26.2, v3.25.1 and below, and Calico Enterprise Typha v3.17.1, v3.16.3, v3.15.3 and below, a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake call is performed inside the main server...
CVE-2023-41378
The CVE-2023-41378 issue affects Calico Typha (v3.26.2, v3.25.1 and below) and Calico Enterprise Typha (v3.17.1, v3.16.3, v3.15.3 and below). The vulnerability arises because the TLS Handshake() is performed inside the main server loop without a timeout, allowing an unclean TLS handshake to block...
CVE-2023-41378 Calico Typha hangs during unclean TLS handshake
In certain conditions for Calico Typha v3.26.2, v3.25.1 and below, and Calico Enterprise Typha v3.17.1, v3.16.3, v3.15.3 and below, a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake call is performed inside the main server...
CVE-2023-41378 Calico Typha hangs during unclean TLS handshake
In certain conditions for Calico Typha v3.26.2, v3.25.1 and below, and Calico Enterprise Typha v3.17.1, v3.16.3, v3.15.3 and below, a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake call is performed inside the main server...
CVE-2023-41378 Calico Typha hangs during unclean TLS handshake
In certain conditions for Calico Typha v3.26.2, v3.25.1 and below, and Calico Enterprise Typha v3.17.1, v3.16.3, v3.15.3 and below, a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake call is performed inside the main server...
CVE-2023-41378: Uncontrolled Resource Consumption
In certain conditions for Calico Typha v3.26.2, v3.25.1 and below, and Calico Enterprise Typha v3.17.1, v3.16.3, v3.15.3 and below, a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake call is performed inside the main server...
PT-2023-27936 · Calico · Calico Typha +1
Name of the Vulnerable Software and Affected Versions: Calico Typha versions 3.26.2 and below Calico Typha version 3.25.1 Calico Enterprise Typha versions 3.17.1 and below Calico Enterprise Typha version 3.16.3 Calico Enterprise Typha version 3.15.3 Description: The issue arises when a client TLS...
Tigera Calico Security Breach
Tigera Calico is an open source network security solution for container, virtual machine and host workloads from Tigera, Inc. in the United States. A security vulnerability exists in Tigera Calico versions prior to v3.26.3 that stems from a client-side TLS handshake that may block the server...
GHSA-Q78C-GWQW-JCMC vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines, aws-efs-csi-driver-fips...
GHSA-Q78C-GWQW-JCMC vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, aws-efs-csi-driver...
CVE-2023-3955 vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines, aws-efs-csi-driver-fips...
PT-2023-27935 · Calico · Calico Enterprise Typha +1
Name of the Vulnerable Software and Affected Versions: Calico Typha versions 3.26.2 and below Calico Enterprise Typha versions 3.17.1, 3.16.3, 3.15.3 and below Description: In certain conditions, a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service...
GHSA-M425-MQ94-257G vulnerabilities
Vulnerabilities for packages: kubeflow, buildkitd, spark-operator, terraform-provider-sendgrid, kubescape, scorecard, dgraph, kubevela, up, aactl, slsa-verifier, src, k3d, cortex...
GHSA-RCJV-MGP8-QVMR vulnerabilities
Vulnerabilities for packages: caddy, k3s, prometheus-adapter, rancher-webhook-fips, up, buildkitd, kubernetes, kubevela, rancher-webhook, kubernetes-fips, kube-oidc-proxy, metrics-server-fips...
CVE-2023-45142 vulnerabilities
Vulnerabilities for packages: buildkitd, kubernetes, kubevela, prometheus-adapter, up, caddy, k3s...
CVE-2023-45142 vulnerabilities
Vulnerabilities for packages: caddy, k3s, prometheus-adapter, rancher-webhook-fips, up, buildkitd, kubernetes, kubevela, rancher-webhook, kubernetes-fips, kube-oidc-proxy, metrics-server-fips...
GHSA-QPPJ-FM5R-HXR3 vulnerabilities
Vulnerabilities for packages: gomplate, kubevela, envoy-ratelimit, nri-prometheus, src, wireguard-go, stakater-reloader, flux-kustomize-controller, aactl, dynamic-localpv-provisioner, nginx-mainline, slsa-verifier, kubeflow, kubeflow-katib, cosign, hey, pulumi-kubernetes-operator, metrics-server,...
CVE-2023-44487 vulnerabilities
Vulnerabilities for packages: gomplate, kubevela, envoy-ratelimit, nri-prometheus, src, wireguard-go, stakater-reloader, flux-kustomize-controller, aactl, dynamic-localpv-provisioner, nginx-mainline, slsa-verifier, kubeflow, kubeflow-katib, cosign, hey, pulumi-kubernetes-operator, metrics-server,...
