The Kubernetes API Server component in versions 1.1-1.14, and versions prior to 1.15.10, 1.16.7 and 1.17.3 allows an authorized user who sends malicious YAML payloads to cause the kube-apiserver to consume excessive CPU cycles while parsing YAML.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade kubernetes | Jul 30, 2024 | Apr 1, 2020 |
| Kubernetes | — | Upgrade Kubernetes to version 1.17.3Upgrade Kubernetes to version 1.15.10Upgrade Kubernetes to version 1.16.8 | Apr 8, 2020 | Apr 1, 2020 |
| Oracle_linux | — | Upgrade olcne-agentUpgrade kubectlUpgrade olcne-utilsUpgrade kubeletUpgrade olcne-nginxUpgrade olcnectlUpgrade cri-oUpgrade kubeadmUpgrade cri-toolsUpgrade conmonUpgrade olcne-api-server | Apr 18, 2020 | Apr 1, 2020 |
| Redhat Openshift | — | Upgrade atomic-openshiftUpgrade openshift | Dec 29, 2020 | Mar 27, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub