CVE-2022-31074CWE-400

KubeEdge Cloud AdmissionController component DoS

Medium · published July 11, 2022

CVSS v3.1
4.5
EPSS
1%
Percentile
56.9
In the wild
Unconfirmed
What it is

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versions 1.11.1, 1.10.2, and 1.9.4, several endpoints in the Cloud AdmissionController may be susceptible to a DoS attack if an HTTP request containing a very large Body is sent to it. The consequence of the exhaustion is that the Cloud AdmissionController will be in denial of service. This bug has been fixed in Kubeedge 1.11.1, 1.10.2, and 1.9.4. There is currently no known workaround.

The record
Technical detail
CVSS v3.1
4.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00822 · 56.9th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2022-07-11T20:10Z
EPSS history
Timeline
  • 11 JUL 20:10Z
    KubeEdge Cloud AdmissionController component DoS
    cvelistv5