Lucene search
RedHatRHSA-2020:0933HistoryApr 01, 2020 - 6:42 p.m.
(RHSA-2020:0933) Moderate: OpenShift Container Platform 4.3.9 ose-openshift-apiserver-container security update
2020-04-0118:42:03
access.redhat.com
39
0.002 Low
EPSS
Percentile
53.5%
Red Hat OpenShift Container Platform is Red Hat’s cloud computing
Kubernetes application platform solution designed for on-premise or private
cloud deployments.
Security Fix(es):
- kubernetes: Use of unbounded ‘client’ label in apiserver_request_total allowed for memory exhaustion (CVE-2020-8552)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Related
ibm
ibm
Security Bulletin: IBM Cloud Kubernetes Service is affected by Kubernetes API server security vulnerabilities (CVE-2019-11254, CVE-2020-8552)
2020-04-30 15:31:00
nessus
nessus
Oracle Linux 7 : olcne / kubernetes (ELSA-2020-5653)
2023-09-07 00:00:00
Kubernetes < 1.15.10 / 1.16.x < 1.16.7 / 1.17.x < 1.17.3 DoS
2020-09-08 00:00:00
RHEL 7 / 8 : OpenShift Container Platform 4.2.29 openshift (RHSA-2020:1527)
2020-04-22 00:00:00
osv
osv
CVE-2019-11254
2020-04-01 21:15:13
Excessive Platform Resource Consumption within a Loop in Kubernetes
2021-12-20 16:55:06
Excessive resource consumption in YAML parsing in gopkg.in/yaml.v2
2021-04-14 20:04:52
debiancve
debiancve
CVE-2019-11254
2020-04-01 21:15:13
CVE-2020-8552
2020-03-27 15:15:12
gitlab
gitlab
Excessive Platform Resource Consumption within a Loop in Kubernetes
2021-12-20 00:00:00
Allocation of Resources Without Limits or Throttling
2022-02-15 00:00:00
Allocation of Resources Without Limits or Throttling
2020-03-27 00:00:00
cve
cve
CVE-2019-11254
2020-04-01 21:15:13
CVE-2020-8552
2020-03-27 15:15:12
redhatcve
redhatcve
CVE-2019-11254
2020-04-01 00:32:01
CVE-2020-8552
2020-03-23 23:01:24
ubuntucve
ubuntucve
CVE-2019-11254
2020-04-01 00:00:00
CVE-2020-8552
2020-03-27 00:00:00
cgr
cgr
CVE-2019-11254 vulnerabilities
2024-05-19 03:07:16
wolfi
wolfi
CVE-2019-11254 vulnerabilities
2024-07-03 09:08:38
veracode
veracode
Denial Of Service (DoS)
2020-04-02 03:17:51
Denial Of Service (DoS)
2020-03-25 03:43:43
prion
prion
Code injection
2020-04-01 21:15:00
Design/Logic Flaw
2020-03-27 15:15:00
cvelist
cvelist
CVE-2019-11254 Kubernetes API Server denial of service vulnerability from malicious YAML payloads
2020-03-31 00:00:00
CVE-2020-8552 Kubernetes API server denial of service
2020-03-27 14:25:15
nvd
nvd
CVE-2019-11254
2020-04-01 21:15:13
CVE-2020-8552
2020-03-27 15:15:12
github
github
Excessive Platform Resource Consumption within a Loop in Kubernetes
2021-12-20 16:55:06
Kubernetes API Server DoS Via API Requests
2022-02-15 01:57:18
broadcom
broadcom
redhat
redhat
oraclelinux
oraclelinux
olcne kubernetes security update
2020-04-17 00:00:00
kubernetes-cni-plugins kubernetes-cni kubernetes olcne security update
2020-06-12 00:00:00
openvas
openvas
Fedora: Security Advisory for origin (FEDORA-2020-aeea04cd13)
2020-07-24 00:00:00
f5
f5
fedora
fedora
[SECURITY] Fedora 32 Update: origin-3.11.2-1.fc32
2020-07-24 01:15:02
photon
photon