Potential slowdown / DoS when parsing specially crafted PEM inputs in github.com/cert-manager/cert-manager
Potential slowdown / DoS when parsing specially crafted PEM inputs in github.com/cert-manager/cert-manager
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-12401US | — | — | ||
A flaw was found in the cert-manager package. This flaw allows an attacker who can modify PEM data that the cert-manager reads, for example, in a Secret resource, to use large amou… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/cert-manager/cert-manager/commit/3a4c9eb55e2e43570679840bbe3217869fbc8efcFIX
- https://github.com/cert-manager/cert-manager/commit/f22f78c8c0a64d718e203b326bc844c488ad7850FIX
- https://github.com/cert-manager/cert-manager/pull/7400FIX
- https://github.com/cert-manager/cert-manager/pull/7401FIX
- https://github.com/cert-manager/cert-manager/pull/7402FIX
- https://github.com/cert-manager/cert-manager/pull/7403FIX
- https://github.com/cert-manager/cert-manager/security/advisories/GHSA-r4pg-vg54-wxx4ADVISORY
- https://go.dev/issue/50116REPORT
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan