31 matches found
GHSA-GFW4-49F9-CP25 KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub
Summary KubeEdge CloudHub uses the viaduct packer to decode messages received from connected peers. The packer reads a 32-bit payload length from the message header and previously allocated a buffer of that size without enforcing an upper bound. An authenticated peer that can establish a viaduct...
KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub
Summary KubeEdge CloudHub uses the viaduct packer to decode messages received from connected peers. The packer reads a 32-bit payload length from the message header and previously allocated a buffer of that size without enforcing an upper bound. An authenticated peer that can establish a viaduct...
EUVD-2026-84004
KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub...
CVE-2026-62370
KubeEdge is vulnerable to an unbounded memory allocation in the pkg/viaduct/pkg/packer component. The Reader.Read function trusts the 32-bit PackageHeader.PayloadLen received through the CloudHub viaduct message-processing path and allocates memory before validating an upper bound. An authenticat...
CVE-2026-62370 KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub
KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.0.0 until 1.21.2, 1.22.2, and 1.23.1, Reader.Read in pkg/viaduct/pkg/packer trusts the 32-bit PackageHeader.PayloadLen received through the CloudHub viaduct...
CVE-2026-62370 KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub
KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.0.0 until 1.21.2, 1.22.2, and 1.23.1, Reader.Read in pkg/viaduct/pkg/packer trusts the 32-bit PackageHeader.PayloadLen received through the CloudHub viaduct...
CVE-2026-62370 KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub
KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.0.0 until 1.21.2, 1.22.2, and 1.23.1, Reader.Read in pkg/viaduct/pkg/packer trusts the 32-bit PackageHeader.PayloadLen received through the CloudHub viaduct...
CVE-2026-62370: Memory Allocation with Excessive Size Value
KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.0.0 until 1.21.2, 1.22.2, and 1.23.1, Reader.Read in pkg/viaduct/pkg/packer trusts the 32-bit PackageHeader.PayloadLen received through the CloudHub viaduct...
PT-2026-96167
Name of the Vulnerable Software and Affected Versions KubeEdge versions 1.0.0 through 1.21.1 KubeEdge versions 1.22.0 through 1.22.1 KubeEdge versions 1.23.0 through 1.23.0 Description The Reader.Read function in pkg/viaduct/pkg/packer trusts the 32-bit PackageHeader.PayloadLen received via the...
Malicious code in elderberry-viaduct-qj17 (npm)
The package elderberry-viaduct-qj17 was found to contain malicious code...
Malicious code in xray-viaduct-s4mo (npm)
The package xray-viaduct-s4mo was found to contain malicious code...
Malicious code in viaduct-kayak-t196 (npm)
The package viaduct-kayak-t196 was found to contain malicious code...
MAL-2025-38293 Malicious code in viaduct-ziggurat-z3f1 (npm)
The package viaduct-ziggurat-z3f1 was found to contain malicious code...
MAL-2025-19981 Malicious code in evergreen-viaduct-pqpx (npm)
The package evergreen-viaduct-pqpx was found to contain malicious code...
Malicious code in evergreen-viaduct-pqpx (npm)
The package evergreen-viaduct-pqpx was found to contain malicious code...
Malicious code in viaduct-ziggurat-z3f1 (npm)
The package viaduct-ziggurat-z3f1 was found to contain malicious code...
Malicious code in strawberry-viaduct-rk25 (npm)
The package strawberry-viaduct-rk25 was found to contain malicious code...
Malicious code in ginger-viaduct-jse0 (npm)
The package ginger-viaduct-jse0 was found to contain malicious code...