34 matches found
GO-2026-6569 KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub in github.com/kubeedge/kubeedge
KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub in github.com/kubeedge/kubeedge...
PT-2026-105588
KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub in github.com/kubeedge/kubeedge...
GHSA-GFW4-49F9-CP25 KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub
Summary KubeEdge CloudHub uses the viaduct packer to decode messages received from connected peers. The packer reads a 32-bit payload length from the message header and previously allocated a buffer of that size without enforcing an upper bound. An authenticated peer that can establish a viaduct...
EUVD-2026-84004
KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub...
KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub
Summary KubeEdge CloudHub uses the viaduct packer to decode messages received from connected peers. The packer reads a 32-bit payload length from the message header and previously allocated a buffer of that size without enforcing an upper bound. An authenticated peer that can establish a viaduct...
CVE-2026-62370 KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub
KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.0.0 until 1.21.2, 1.22.2, and 1.23.1, Reader.Read in pkg/viaduct/pkg/packer trusts the 32-bit PackageHeader.PayloadLen received through the CloudHub viaduct...
CVE-2026-62370 KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub
KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.0.0 until 1.21.2, 1.22.2, and 1.23.1, Reader.Read in pkg/viaduct/pkg/packer trusts the 32-bit PackageHeader.PayloadLen received through the CloudHub viaduct...
CVE-2026-62370 KubeEdge: Unbounded allocation in viaduct packer enables authenticated remote DoS against CloudHub
KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.0.0 until 1.21.2, 1.22.2, and 1.23.1, Reader.Read in pkg/viaduct/pkg/packer trusts the 32-bit PackageHeader.PayloadLen received through the CloudHub viaduct...
CVE-2026-62370
KubeEdge is vulnerable to an unbounded memory allocation in the pkg/viaduct/pkg/packer component. The Reader.Read function trusts the 32-bit PackageHeader.PayloadLen received through the CloudHub viaduct message-processing path and allocates memory before validating an upper bound. An authenticat...
CVE-2026-62370: Memory Allocation with Excessive Size Value
KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. From 1.0.0 until 1.21.2, 1.22.2, and 1.23.1, Reader.Read in pkg/viaduct/pkg/packer trusts the 32-bit PackageHeader.PayloadLen received through the CloudHub viaduct...
PT-2026-96167
Name of the Vulnerable Software and Affected Versions KubeEdge versions 1.0.0 through 1.21.1 KubeEdge versions 1.22.0 through 1.22.1 KubeEdge versions 1.23.0 through 1.23.0 Description The Reader.Read function in pkg/viaduct/pkg/packer trusts the 32-bit PackageHeader.PayloadLen received via the...
Malicious code in viaduct-kayak-t196 (npm)
The package viaduct-kayak-t196 was found to contain malicious code...
Malicious code in strawberry-viaduct-rk25 (npm)
The package strawberry-viaduct-rk25 was found to contain malicious code...
MAL-2025-19367 Malicious code in elderberry-viaduct-qj17 (npm)
The package elderberry-viaduct-qj17 was found to contain malicious code...
Malicious code in elderberry-viaduct-qj17 (npm)
The package elderberry-viaduct-qj17 was found to contain malicious code...
MAL-2025-19981 Malicious code in evergreen-viaduct-pqpx (npm)
The package evergreen-viaduct-pqpx was found to contain malicious code...
MAL-2025-38291 Malicious code in viaduct-kayak-t196 (npm)
The package viaduct-kayak-t196 was found to contain malicious code...
MAL-2025-34070 Malicious code in strawberry-viaduct-rk25 (npm)
The package strawberry-viaduct-rk25 was found to contain malicious code...