Lucene search
RedHatRHSA-2019:3239HistoryOct 29, 2019 - 4:03 p.m.
(RHSA-2019:3239) Important: OpenShift Container Platform 3.10 atomic-openshift security update
2019-10-2916:03:25
access.redhat.com
65
0.019 Low
EPSS
Percentile
88.6%
Red Hat OpenShift Container Platform is Red Hat’s cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
Security Fix(es):
-
kubernetes: YAML parsing vulnerable to “Billion Laughs” attack, allowing for remote denial of service (CVE-2019-11253)
-
kubernetes: Incomplete fixes for CVE-2019-1002101 and CVE-2019-11246, kubectl cp potential directory traversal (CVE-2019-11249)
-
kube-apiserver: DoS with crafted patch of type json-patch (CVE-2019-1002100)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
nessus
nessus
redhatcve
redhatcve
CVE-2019-11249
2020-04-09 10:50:34
CVE-2019-11246
2020-04-09 10:42:04
CVE-2019-1002100
2019-10-10 00:09:42
veracode
veracode
Directory Traversal
2019-08-06 01:38:57
Denial Of Service (DoS)
2019-03-04 03:56:20
Directory Traversal
2019-06-24 04:57:31
ibm
ibm
redhat
redhat
attackerkb
attackerkb
kubectl cp path traversal
2019-04-01 00:00:00
Kubectl/API Server YAML parsing vulnerable to "Billion Laughs" Attack
2019-10-17 00:00:00
openvas
openvas
Fedora Update for kubernetes FEDORA-2019-2b8ef08c95
2019-08-27 00:00:00
Fedora Update for kubernetes FEDORA-2019-bf800b1c04
2019-06-20 00:00:00
oraclelinux
oraclelinux
kubernetes security update
2019-04-13 00:00:00
kubernetes security update
2019-04-13 00:00:00
kubernetes security update
2019-04-13 00:00:00
fedora
fedora
[SECURITY] Fedora 30 Update: kubernetes-1.15.2-1.fc30
2019-08-26 00:53:13
[SECURITY] Fedora 30 Update: kubernetes-1.13.5-1.fc30
2019-06-19 22:46:08
photon
photon
Important Photon OS Security Update - PHSA-2019-0031
2019-09-27 00:00:00
Important Photon OS Security Update - PHSA-2019-3.0-0031
2019-09-28 00:00:00
osv
osv
Kubernetes DoS Vulnerability
2022-05-13 01:21:42
CVE-2019-1002100
2019-04-01 14:29:00
CVE-2019-11249
2019-08-29 01:15:11
ubuntucve
ubuntucve
CVE-2019-1002100
2019-04-01 00:00:00
CVE-2019-11249
2019-08-29 00:00:00
CVE-2019-11246
2019-08-29 00:00:00
prion
prion
cve
cve
CVE-2019-1002100
2019-04-01 14:29:00
CVE-2019-11249
2019-08-29 01:15:11
CVE-2019-1002101
2019-04-01 14:29:00
cvelist
cvelist
CVE-2019-1002100
2019-04-01 14:14:27
CVE-2019-11249 kubectl cp allows symlink directory traversal
2019-08-05 00:00:00
CVE-2019-11246 kubectl cp allows symlink directory traversal
2019-06-21 00:00:00
github
github
Kubernetes DoS Vulnerability
2022-05-13 01:21:42
XML Entity Expansion and Improper Input Validation in Kubernetes API server
2021-05-18 15:38:48
Symlink Attack in kubectl cp
2022-02-15 01:57:18
debiancve
debiancve
CVE-2019-1002100
2019-04-01 14:29:00
CVE-2019-11249
2019-08-29 01:15:11
CVE-2019-11246
2019-08-29 01:15:11
alpinelinux
alpinelinux
CVE-2019-11253
2019-10-17 16:15:10
CVE-2019-11249
2019-08-29 01:15:11
gitlab
gitlab
Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')
2021-05-18 00:00:00
Improper Link Resolution Before File Access
2019-04-01 00:00:00
nvd
nvd
cloudfoundry
cloudfoundry
freebsd
freebsd
Kubectl -- Potential directory traversal
2019-03-28 00:00:00
symantec
symantec
Kubernetes API Server CVE-2019-11253 Denial of Service Vulnerability
2019-09-27 00:00:00
checkpoint_advisories
checkpoint_advisories
Kubernetes API Server Denial Of Service (CVE-2019-11253)
2019-12-26 00:00:00
threatpost
threatpost
ThreatList: One-Third of Firms Say Their Container Security Lags
2018-11-23 13:00:48
Dangerous Kubernetes Bugs Allow Authentication Bypass, DoS
2019-10-17 14:25:39
Public Bug Bounty Takes Aim at Kubernetes Container Project
2020-01-14 17:00:28
kitploit
kitploit
f5
f5
trendmicroblog
trendmicroblog
This Week in Security News: Malvertising and Internet of Things Malware
2019-06-28 14:24:11