Lucene search
Https://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-810ADA37F486B156C48C2FACE0963EC3HistoryMay 18, 2021 - 12:00 a.m.
Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
2021-05-1800:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
19
improper input validation
kubernetes
api server
yaml payloads
json payloads
cpu consumption
memory consumption
rbac policy
anonymous users
vulnerability
backwards compatibility
EPSS
0.019
Percentile
88.5%
Improper input validation in the Kubernetes API server in versions v1.0-1.12 and versions prior to v1.13.12, v1.14.8, v1.15.5, and v1.16.2 allows authorized users to send malicious YAML or JSON payloads, causing the API server to consume excessive CPU or memory, potentially crashing and becoming unavailable. Prior to v1.14.0, default RBAC policy authorized anonymous users to submit requests that could trigger this vulnerability. Clusters upgraded from a version prior to v1.14.0 keep the more permissive policy by default for backwards compatibility.
Related
nessus
nessus
debiancve
debiancve
CVE-2019-11253
2019-10-17 16:15:10
redhat
redhat
osv
osv
XML Entity Expansion and Improper Input Validation in Kubernetes API server in k8s.io/kubernetes
2024-08-21 15:21:45
Kubernetes apimachinery packages vulnerable to unbounded recursion in JSON or YAML parsing
2023-02-08 00:35:27
CGA-7mwh-q3cw-f4g8
2024-06-06 12:23:27
alpinelinux
alpinelinux
CVE-2019-11253
2019-10-17 16:15:10
ibm
ibm
Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2019-11253)
2019-10-25 16:46:16
Security Bulletin: IBM API Connect is impacted by a vulnerability in Kubernetes(CVE-2019-11253)
2020-01-02 17:44:12
Security Bulletin: Open Source Security issues for NPS service provider
2020-12-11 07:12:00
attackerkb
attackerkb
Kubectl/API Server YAML parsing vulnerable to "Billion Laughs" Attack
2019-10-17 00:00:00
nvd
nvd
CVE-2019-11253
2019-10-17 16:15:10
github
github
prion
prion
Input validation
2019-10-17 16:15:00
ubuntucve
ubuntucve
CVE-2019-11253
2019-10-17 00:00:00
symantec
symantec
Kubernetes API Server CVE-2019-11253 Denial of Service Vulnerability
2019-09-27 00:00:00
checkpoint_advisories
checkpoint_advisories
Kubernetes API Server Denial Of Service (CVE-2019-11253)
2019-12-26 00:00:00
redhatcve
redhatcve
CVE-2019-11253
2019-10-02 08:51:08
veracode
veracode
Denial Of Service (DoS)
2019-10-02 02:49:42
cvelist
cvelist
cve
cve
CVE-2019-11253
2019-10-17 16:15:10
threatpost
threatpost
ThreatList: One-Third of Firms Say Their Container Security Lags
2018-11-23 13:00:48
Dangerous Kubernetes Bugs Allow Authentication Bypass, DoS
2019-10-17 14:25:39
Public Bug Bounty Takes Aim at Kubernetes Container Project
2020-01-14 17:00:28
photon
photon
Important Photon OS Security Update - PHSA-2019-0031
2019-09-27 00:00:00
Critical Photon OS Security Update - PHSA-2019-0184
2019-10-23 00:00:00
Important Photon OS Security Update - PHSA-2019-3.0-0031
2019-09-28 00:00:00
oraclelinux
oraclelinux
kubernetes security update
2020-01-31 00:00:00
kubernetes kubeadm-ha-setup kubeadm-upgrade security update
2020-04-17 00:00:00
kitploit
kitploit