913 matches found
AZL-54434 CVE-2024-45338 affecting package kube-vip-cloud-provider for versions less than 0.0.10-3
An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service...
Denial Of Service (DoS)
Kube-controller-manager is vulnerable to denial of service. The vulnerability is due to a missing .spec.behavior.scaleUp block in the HPA YAML file, causing kube-controller-manager pods to enter a restart loop and disrupt service availability. It allows an attacker to trigger a DoS by deploying t...
Moderate: Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.0.2 for RHEL 9
Kube Descheduler Operator for Red Hat OpenShift 5.0.2 for RHEL 9 Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
GHSA-27WF-5967-98GX vulnerabilities
Vulnerabilities for packages: aws-efs-csi-driver, kubeflow-pipelines, argocd-image-updater-fips, kubernetes-dns-node-cache-fips, local-static-provisioner-fips, argocd-image-updater, aws-efs-csi-driver-fips, rancher-webhook, rancher-webhook-fips, nodetaint, local-static-provisioner, ip-masq-agent,...
CVE-2024-0793
A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn...
CVE-2024-0793 Kube-controller-manager: malformed hpa v1 manifest causes crash
A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn...
CVE-2024-0793 Kube-controller-manager: malformed hpa v1 manifest causes crash
A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn...
CVE-2024-0793 Kube-controller-manager: malformed hpa v1 manifest causes crash
A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn...
AZL-52227 CVE-2024-51744 affecting package kube-vip-cloud-provider for versions less than 0.0.2-22
golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...
CVE-2024-49761 vulnerabilities
Vulnerabilities for packages: logstash, jruby, kube-fluentd-operator, ruby...
GHSA-2RXP-V6PW-CH6M vulnerabilities
Vulnerabilities for packages: logstash, jruby, kube-fluentd-operator, ruby...
Moderate: Red Hat Security Advisory: Kube Descheduler Operator for Red Hat OpenShift 5.1.0 for RHEL 9
Kube Descheduler Operator for Red Hat OpenShift 5.1.0 for RHEL 9 The Kube Descheduler Operator for Red Hat OpenShift is an optional operator that deploys the descheduler, which is responsible for evicting pods based on certain strategies. Security Fixes: golang: net: malformed DNS message can cau...
CVE-2023-32191 rke's credentials are stored in the RKE1 Cluster state ConfigMap
When RKE provisions a cluster, it stores the cluster state in a configmap called full-cluster-state inside the kube-system namespace of the cluster itself. The information available in there allows non-admin users to escalate to admin...
CVE-2024-28180 affecting package kube-vip-cloud-provider for versions less than 0.0.2-19
CVE-2024-28180 affecting package kube-vip-cloud-provider for versions less than 0.0.2-19. A patched version of the package is available...
GHSA-XHR3-WF7J-H255 vulnerabilities
Vulnerabilities for packages: kube-metrics-adapter, fq...
CVE-2024-44337 vulnerabilities
Vulnerabilities for packages: kube-metrics-adapter, fq...
CVE-2024-44337 vulnerabilities
Vulnerabilities for packages: kube-metrics-adapter, fq...
openSUSE: Security Advisory for kubernetes1.23 (SUSE-SU-2024:3341-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...