Lucene search
Veracode Vulnerability DatabaseVERACODE:36142HistoryJun 27, 2022 - 5:49 a.m.
Denial Of Service (Dos)
2022-06-2705:49:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.0004 Low
EPSS
Percentile
12.8%
github.com/kubeedge/kubeedge is vulnerable to denial of service. The vulnerability exists due to a lack of input sanitization in the uds server which allows a malicious user to send a malicious message and crash the system via a null pointer dereference.
References
github.com/advisories/GHSA-8f4f-v9x5-cg6j
github.com/kubeedge/kubeedge/commit/5d60ae9eabd6b6b7afe38758e19bbe8137664701
github.com/kubeedge/kubeedge/commit/6ae57ca235329ed318e32720e699aef07aff1459
github.com/kubeedge/kubeedge/commit/6c2b2298121a4695647a2e31df15169def547222
github.com/kubeedge/kubeedge/pull/3899/commits/5d60ae9eabd6b6b7afe38758e19bbe8137664701
github.com/kubeedge/kubeedge/security/advisories/GHSA-8f4f-v9x5-cg6j
Related
osv
osv
CVE-2022-31076
2022-06-27 20:15:08
CloudCore UDS Server: Malicious Message can crash CloudCore
2022-06-25 07:19:34
prion
prion
Design/Logic Flaw
2022-06-27 20:15:00
cvelist
cvelist
CVE-2022-31076 Malicious Message can crash CloudCore in KubeEdge
2022-06-27 20:10:10
nvd
nvd
CVE-2022-31076
2022-06-27 20:15:08
cve
cve
CVE-2022-31076
2022-06-27 20:15:08
github
github
CloudCore UDS Server: Malicious Message can crash CloudCore
2022-06-25 07:19:34