CVE-2019-11254

ADVISORY - github

Summary

The Kubernetes API Server component in versions 1.1-1.14, and versions prior to 1.15.10, 1.16.7 and 1.17.3 allows an authorized user who sends malicious YAML payloads to cause the kube-apiserver to consume excessive CPU cycles while parsing YAML.

EPSS Score⁠: 0.0011 (0.303)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-1050⁠

Excessive Platform Resource Consumption within a Loop

CWE-other⁠

ADVISORY - github

CWE-1050⁠

Excessive Platform Resource Consumption within a Loop

ADVISORY - gitlab

CWE-1035⁠

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

CWE-937⁠

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

ADVISORY - redhat

CWE-400⁠

Uncontrolled Resource Consumption

Impacted images

Advisories

NIST

CREATED

5 years ago

UPDATED

7 months ago

ADVISORY IDCVE-2019-11254⁠

EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-1050⁠CWE-other⁠

CVSS SCORE

6.5medium

GitHub

CREATED

4 years ago

UPDATED

2 years ago

ADVISORY IDGHSA-wxc4-f4m6-wwqv⁠

EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-1050⁠

CVSS SCORE

6.5medium

Debian

CREATED

5 years ago

UPDATED

3 months ago

ADVISORY IDCVE-2019-11254⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

Ubuntu

CREATED

5 years ago

UPDATED

26 days ago

ADVISORY IDCVE-2019-11254⁠

EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

6.5medium

GoLang

CREATED

4 years ago

UPDATED

1 year ago

ADVISORY IDGO-2020-0036⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY

GitLab

CREATED

4 years ago

UPDATED

4 years ago

ADVISORY ID

CVE-2019-11254

EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-1035⁠CWE-937⁠

CVSS SCORE

6.5medium

Red Hat

CREATED

5 years ago

UPDATED

4 months ago

ADVISORY IDCVE-2019-11254⁠

EXPLOITABILITY SCORE

2.8

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)

CWE-400⁠

CVSS SCORE

6.5medium

Oracle

CREATED

5 years ago

UPDATED

5 years ago

ADVISORY IDELSA-2020-5653⁠

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

CVSS SCORE

N/Ahigh

Chainguard

CREATED

1 year ago

UPDATED

1 year ago

ADVISORY ID

CGA-c7mh-q2h5-qwr6

EXPLOITABILITY SCORE

EXPLOITS FOUND

COMMON WEAKNESS ENUMERATION (CWE)-

RATING UNAVAILABLE FROM ADVISORY