Lucene search
+L

2 matches found

Github Security Blog
Github Security Blog
added 2022/07/15 5:17 a.m.62 views

fabric8 kubernetes-client vulnerable

fabric8 Kubernetes client had an arbitrary code execution flaw in versions 5.0.0-beta-1 and higher. Attackers could potentially insert malicious YAMLs due to misconfigured YAML parsing...

6.7CVSS4.5AI score0.00332EPSS
SaveExploits0References7Affected Software1
RedHat Linux
RedHat Linux
added 2020/07/07 7:35 p.m.6 views

kubernetes: YAML parsing vulnerable to "Billion Laughs" attack, allowing for remote denial of service

A flaw was found kubernetes. The parsing of YAML manifests by the Kubernetes API server could lead to a denial-of-service attack leaving it vulnerable to an instance of a "billion laughs" attack. The highest threat from this vulnerability is to system availability...

7.5CVSS6.8AI score0.25939EPSS
SaveExploits2References5
Rows per page
Query Builder