Lucene search

CVE-2019-11253

🗓️ 17 Oct 2019 00:00:00Reported by ubuntu.comType

Improper input validation in Kubernetes API server v1.0-1.12 allows authorized users to send malicious payloads, causing excessive CPU or memory consumption, potentially crashing and becoming unavailable

Reporter	Title	Published	Views	Family All 86
Tenable Nessus	RHEL 7 / 8 : OpenShift Container Platform 4.1.20 openshift (RHSA-2019:3132)	17 Oct 201900:00	–	nessus
Tenable Nessus	RHEL 8 : Red Hat OpenShift Service Mesh 1.0 servicemesh-cni (RHSA-2020:2870)	7 Jul 202000:00	–	nessus
Tenable Nessus	RHEL 8 : Red Hat OpenShift Service Mesh 1.0 servicemesh-prometheus (RHSA-2020:2863)	7 Jul 202000:00	–	nessus
Tenable Nessus	RHEL 8 : Red Hat OpenShift Service Mesh servicemesh-cni (RHSA-2020:2799)	1 Jul 202000:00	–	nessus
Tenable Nessus	Photon OS 1.0: Kubernetes PHSA-2020-1.0-0264	16 Jan 202000:00	–	nessus
Tenable Nessus	RHEL 7 : OpenShift Container Platform 3.11 atomic-openshift (RHSA-2019:3905)	20 Nov 201900:00	–	nessus
Tenable Nessus	RHEL 8 : Red Hat OpenShift Service Mesh 1.1 servicemesh-operator (RHSA-2020:2795)	1 Jul 202000:00	–	nessus
Tenable Nessus	Photon OS 3.0: Kubernetes PHSA-2019-3.0-0031	22 Oct 201900:00	–	nessus
Tenable Nessus	RHEL 7 : OpenShift Container Platform 3.10 atomic-openshift (RHSA-2019:3239)	30 Oct 201900:00	–	nessus
Tenable Nessus	RHEL 7 : OpenShift Container Platform 3.9 atomic-openshift (RHSA-2019:3811)	8 Nov 201900:00	–	nessus

Source	Link
github	www.github.com/kubernetes/kubernetes/issues/83253
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-11253
launchpad	www.launchpad.net/bugs/cve/CVE-2019-11253
security-tracker	www.security-tracker.debian.org/tracker/CVE-2019-11253

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 Oct 2019 00:00Current

3.5Low risk

Vulners AI Score3.5

CVSS25.0

CVSS37.5

EPSS0.026

kubernetes api server; input validation; authorized users; malicious payloads; excessive cpu; memory consumption; vulnerability; rbac policy; anonymous users; compatibility