A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn.
CVSS Details
- CVSS 3.1 Base Score: 7.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Redhat Openshift | — | Upgrade openshift | Mar 21, 2024 | Feb 7, 2024 |
| Suse | — | Upgrade kubernetes1.25-clientUpgrade kubernetes1.23-client-commonUpgrade kubernetes1.23-apiserverUpgrade kubernetes1.24-client-fish-completionUpgrade kubernetes1.26-client-commonUpgrade kubernetes1.24-client-bash-completionUpgrade kubernetes1.24-client-commonUpgrade kubernetes1.23-client-bash-completionUpgrade kubernetes1.24-kubelet-commonUpgrade kubernetes1.24-schedulerUpgrade kubernetes1.24-apiserverUpgrade kubernetes1.24-kubeadmUpgrade kubernetes1.24-kubeletUpgrade kubernetes1.24-controller-managerUpgrade kubernetes1.26-clientUpgrade kubernetes1.23-kubeadmUpgrade kubernetes1.23-clientUpgrade kubernetes1.25-client-commonUpgrade kubernetes1.23-kubelet-commonUpgrade kubernetes1.24-clientUpgrade kubernetes1.24-proxyUpgrade govulncheck-vulndbUpgrade kubernetes1.23-controller-managerUpgrade kubernetes1.23-kubeletUpgrade kubernetes1.23-schedulerUpgrade kubernetes1.23-client-fish-completionUpgrade kubernetes1.23-proxy | Apr 9, 2024 | Apr 8, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub