BDU%3A2022-05639 — Vulnetix

BDU%3A2022-05639 PUBLISHED CVSS 6.800000190734863 MEDIUM

Уязвимость программного средства синхронизации кластеров Kubernetes с источниками конфигурации Flux и пакетного менеджера для Kubernetes Helm, связанная c некорректной зачисткой или освобождением ресурсов, позволяющая нарушителю вызвать отказ в обслуживании

Risk Scores

CVSS 2.0

6.800000190734863

Affected Products

Vendor	Product	Versions
The Linux Foundation, The Flux	Helm, Flux

Exploit Intelligence

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48360 (circl)
https://github.com/fluxcd/flux2/security/advisories/GHSA-p2g7-xwvr-rrw3 (circl)
https://github.com/helm/helm/security/advisories/GHSA-7hfp-qfw3-5jxh (circl)
go_dos.json (github-poc)
go_dos.json (github-poc)

Timeline

Sep 9, 2022 CVE Published

References

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=48360 url
https://github.com/fluxcd/flux2/security/advisories/GHSA-p2g7-xwvr-rrw3 url
https://github.com/helm/helm/security/advisories/GHSA-7hfp-qfw3-5jxh url

Open in Interactive Console →