CVE-2024-0793

Published: Nov 17, 2024Modified: Jun 17, 2026Deferred

7.7

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H

Exploitability: 3.1 / Impact: 4.0

Source: secalert@redhat.com (Secondary)

Description

A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn.

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (5)

https://access.redhat.com/errata/RHSA-2024:0741

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2024:1267

Source: secalert@redhat.com

https://access.redhat.com/security/cve/CVE-2024-0793

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2214402

Source: secalert@redhat.com

https://github.com/openshift/kubernetes/pull/1876

Source: secalert@redhat.com

Timeline

No history available yet.