Veracode Vulnerability DatabaseVERACODE:36322Denial Of Service (DoS)
0.001 Low
EPSS
Percentile
35.0%
github.com/kubeedge/kubeedge is vulnerable to denial of service. The vulnerability exists because Cloud and Edge Stream servers do not properly limit the size of the message that is being read into memory which allows an attacker to send large messages causing a memory exhaustion which then leads to an application crash.
References
github.com/advisories/GHSA-wrcr-x4qj-j543
github.com/kubeedge/kubeedge/commit/327096ebe250185f1a4439394a7c027b72639cb3
github.com/kubeedge/kubeedge/commit/7420c09bb311099f61d79a051ce5446976b1ea4e
github.com/kubeedge/kubeedge/commit/8145284d40da35c493104abcf5667376c6f7e6b9
github.com/kubeedge/kubeedge/pull/4038
github.com/kubeedge/kubeedge/pull/4039
github.com/kubeedge/kubeedge/pull/4042
github.com/kubeedge/kubeedge/security/advisories/GHSA-wrcr-x4qj-j543
Related
