PT-2024-5047 · Argo Cd +1 · Argo Cd +1

Name of the Vulnerable Software and Affected Versions: Argo CD versions prior to 2.8.19 Argo CD versions prior to 2.9.15 Argo CD versions prior to 2.10.10 Description: The issue concerns an unprivileged pod in a different namespace on the same cluster being able to connect to the Redis server on...

PT-2024-5352 · Argo Cd · Argo Cd

Name of the Vulnerable Software and Affected Versions: Argo CD versions prior to 2.11.3 Argo CD versions prior to 2.10.12 Argo CD versions prior to 2.9.17 Description: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. It’s possible for authenticated users to enumerate...

GHSA-952P-6RRQ-RCJV vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, ts-patch, py3-captum, argo-workflows, gitlab-rails-ce, renovate, semaphore, kubeflow-katib, lerna, kibana, opensearch-dashboards-fips, gitlab-rails-ce-fips, opensearch-dashboards...

CVE-2024-4067 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, ts-patch, py3-captum, argo-workflows, gitlab-rails-ce, renovate, semaphore, kubeflow-katib, lerna, kibana, opensearch-dashboards-fips, gitlab-rails-ce-fips, opensearch-dashboards...

CVE-2024-32476 vulnerabilities

Vulnerabilities for packages: argo-cd, argo-cd-fips...

CVE-2024-32476

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. There is a Denial of Service DoS vulnerability via OOM using jq in ignoreDifferences. This vulnerability has been patched in versions 2.10.7, 2.9.12 and 2.8.16...

CVE-2024-32476 vulnerabilities

Vulnerabilities for packages: argo-cd...

Argo CD Security Vulnerability

Argo CD is a software application. A declarative GitOps continuous delivery tool for Kubernetes. It continuously monitors running applications and compares the current live state with the desired target state e.g., configuration in a Git repository, automatically synchronizing and deploying...

Important: Red Hat Security Advisory: Errata Advisory for Red Hat OpenShift GitOps v1.11.4 security update

An update is now available for Red Hat OpenShift GitOps v1.11.4 for Argo CD UI and Console Plugin. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

Denial Of Service (DoS)

github.com/argoproj/argo-cd/ is vulnerable to Denial Of Service DoS. The vulnerability is due to inadequate validation of input within the ignoreDifferences configuration, allowing an attacker to craft a jqPathExpressions which consumes excessive memory, leading to a DoS condition...

GHSA-9M6P-X4H2-6FRQ vulnerabilities

Vulnerabilities for packages: argo-cd...

GHSA-9M6P-X4H2-6FRQ Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences

Impact DoS vuln via OOM using jq in ignoreDifferences. ignoreDifferences: - group: apps kind: Deployment jqPathExpressions: - 'untiltrue == false; . + 1' Patches A patch for this vulnerability has been released in the following Argo CD versions: v2.10.8 v2.9.13 v2.8.17 For more information If you...

GHSA-9M6P-X4H2-6FRQ vulnerabilities

Vulnerabilities for packages: argo-cd, argo-cd-fips...

Argo CD vulnerable to a Denial of Service via malicious jqPathExpressions in ignoreDifferences

Impact DoS vuln via OOM using jq in ignoreDifferences. ignoreDifferences: - group: apps kind: Deployment jqPathExpressions: - 'untiltrue == false; . + 1' Patches A patch for this vulnerability has been released in the following Argo CD versions: v2.10.8 v2.9.13 v2.8.17 For more information If you...

CVE-2024-32476 Denial of Service via malicious jqPathExpressions in ignoreDifferences

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. There is a Denial of Service DoS vulnerability via OOM using jq in ignoreDifferences. This vulnerability has been patched in versions 2.10.7, 2.9.12 and 2.8.16...

CVE-2024-32476 Denial of Service via malicious jqPathExpressions in ignoreDifferences

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. There is a Denial of Service DoS vulnerability via OOM using jq in ignoreDifferences. This vulnerability has been patched in versions 2.10.7, 2.9.12 and 2.8.16...

CVE-2024-32476

CVE-2024-32476 affects Argo CD (GitOps for Kubernetes). The vulnerability is a Denial of Service caused by an OOM triggered by jq in ignoreDifferences logic. Root cause details indicate uncontrolled memory use when processing certain jqPathExpressions. Patched versions are 2.10.7, 2.9.12, and 2.8...

CVE-2024-32476 Denial of Service via malicious jqPathExpressions in ignoreDifferences

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. There is a Denial of Service DoS vulnerability via OOM using jq in ignoreDifferences. This vulnerability has been patched in versions 2.10.7, 2.9.12 and 2.8.16...

GHSA-PXHW-596R-RWQ5 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, rancher-webhook-fips, kubeflow-pipelines, local-static-provisioner, spark-operator, ip-masq-agent, kubernetes, rancher-webhook, kubernetes-csi-driver-hostpath, aws-efs-csi-driver, nodetaint, argocd-image-updater, aws-efs-csi-driver-fips,...

CVE-2024-3177 vulnerabilities

Vulnerabilities for packages: argocd-image-updater-fips, rancher-webhook-fips, kubeflow-pipelines, local-static-provisioner, spark-operator, ip-masq-agent, kubernetes, rancher-webhook, kubernetes-csi-driver-hostpath, aws-efs-csi-driver, nodetaint, argocd-image-updater, aws-efs-csi-driver-fips,...