CVE-2024-0793

Published Nov 17, 2024

Last updated 3 months ago

Overview

Description: A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn.
Source: secalert@redhat.com
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Primary
Base score: 7.7
Impact score: 4
Exploitability score: 3.1
Vector string: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
Severity: HIGH

Weaknesses

secalert@redhat.com: CWE-20

Hype score: Not currently trending

CVE-2024-0793 A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial … https://t.co/xhEpatUMrM
@CVEnew
17 Nov 2024
749 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes

References