Lucene search
+L

3 matches found

OSV
OSV
added 2022/10/28 4:7 p.m.34 views

GO-2022-1071 Denial of service in flux controllers in github.com/fluxcd modules

Flux controllers are vulnerable to a denial of service attack. Users that have permissions to change Flux's objects, either through a Flux source or directly within a cluster, can provide invalid data to fields .spec.interval or .spec.timeout and structured variations of these fields, causing the...

5CVSS4.5AI score0.00634EPSS
SaveExploits0References8
OSV
OSV
added 2022/10/19 6:40 p.m.36 views

GHSA-F4P5-X4VC-MH4V Improper use of metav1.Duration allows for Denial of Service

Flux controllers within the affected versions range are vulnerable to a denial of service attack. Users that have permissions to change Flux’s objects, either through a Flux source or directly within a cluster, can provide invalid data to fields .spec.interval or .spec.timeout and structured...

5CVSS4.6AI score0.00634EPSS
SaveExploits0References12
Github Security Blog
Github Security Blog
added 2022/10/19 6:40 p.m.36 views

Improper use of metav1.Duration allows for Denial of Service

Flux controllers within the affected versions range are vulnerable to a denial of service attack. Users that have permissions to change Flux’s objects, either through a Flux source or directly within a cluster, can provide invalid data to fields .spec.interval or .spec.timeout and structured...

5CVSS5AI score0.00634EPSS
SaveExploits0References12Affected Software13
Rows per page
Query Builder