Potential slowdown / DoS when parsing specially crafted PEM inputs in github.com/cert-manager/cert-manager
Potential slowdown / DoS when parsing specially crafted PEM inputs in github.com/cert-manager/cert-manager
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-12401US | — | — | ||
A flaw was found in the cert-manager package. This flaw allows an attacker who can modify PEM data that the cert-manager reads, for example, in a Secret resource, to use large amou… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/cert-manager/cert-manager/commit/3a4c9eb55e2e43570679840bbe3217869fbc8efcFIX
- https://github.com/cert-manager/cert-manager/commit/f22f78c8c0a64d718e203b326bc844c488ad7850FIX
- https://github.com/cert-manager/cert-manager/pull/7400FIX
- https://github.com/cert-manager/cert-manager/pull/7401FIX
- https://github.com/cert-manager/cert-manager/pull/7402FIX
- https://github.com/cert-manager/cert-manager/pull/7403FIX
- https://github.com/cert-manager/cert-manager/security/advisories/GHSA-r4pg-vg54-wxx4ADVISORY
- https://go.dev/issue/50116REPORT
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan