CVE-2015-5250

Denial of Service in OpenShift Origin

4.0 MediumFix available

CVE-2015-5250 is a medium vulnerability (CVSS 4.0) in Redhat Openshift Origin, published September 8, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.99%, the 80th percentile. Fixed in github.com/openshift/origin 1.0.6.

The API server in OpenShift Origin 1.0.5 allows remote attackers to cause a denial of service (master process crash) via crafted JSON data.

Exploit likelihood

1.99%Up 0.9 points since Feb 4, 2022

What each source reports

NVD Score used 4.0

The API server in OpenShift Origin 1.0.5 allows remote attackers to cause a denial of service (master process crash) via crafted JSON data.

Record: CVE-2015-5250
CVSS 2.0: 4.0 MediumAV:N/AC:L/Au:S/C:N/I:N/A:P
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

The API server in OpenShift Origin 1.0.5 allows remote attackers to cause a denial of service (master process crash) via crafted JSON data.

Record: CVE-2015-5250
Updated: 2026-11-02

EUVDEUVD-2021-2580 No score

The API server in OpenShift Origin 1.0.5 allows remote attackers to cause a denial of service (master process crash) via crafted JSON data.

Record: EUVD-2021-2580
Updated: 2026-11-03

GitHub AdvisoriesGHSA-rf3m-mhv7-x39f 4.3

Denial of Service in OpenShift Origin

The API server in OpenShift Origin 1.0.5 allows remote attackers to cause a denial of service (master process crash) via crafted JSON data

Record: GHSA-rf3m-mhv7-x39f
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Weakness: CWE-20
Updated: 2026-11-02

OSVGHSA-rf3m-mhv7-x39f 4.3

Denial of Service in OpenShift Origin

The API server in OpenShift Origin 1.0.5 allows remote attackers to cause a denial of service (master process crash) via crafted JSON data

Record: GHSA-rf3m-mhv7-x39f
CVSS 3.1: 4.3 MediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Weakness: CWE-20
Updated: 2026-11-02

OSVGO-2022-0875 No score

Denial of Service in OpenShift Origin in github.com/openshift/origin

Denial of Service in OpenShift Origin in github.com/openshift/origin

Record: GO-2022-0875
Updated: 2026-11-02

Affected products

redhat openshift origin

Affected packages

Affected packages
Package	Affected	Fixed
`github.com/openshift/origin` Go	before 1.0.6	1.0.6
`openshift` Red Hat:openshift:3.0::el7	before 0:3.0.1.0-1.git.529.dcab62c.el7ose	0:3.0.1.0-1.git.529.dcab62c.el7ose
`openshift-clients` Red Hat:openshift:3.0::el7	before 0:3.0.1.0-1.git.529.dcab62c.el7ose	0:3.0.1.0-1.git.529.dcab62c.el7ose
`openshift-master` Red Hat:openshift:3.0::el7	before 0:3.0.1.0-1.git.529.dcab62c.el7ose	0:3.0.1.0-1.git.529.dcab62c.el7ose
`openshift-node` Red Hat:openshift:3.0::el7	before 0:3.0.1.0-1.git.529.dcab62c.el7ose	0:3.0.1.0-1.git.529.dcab62c.el7ose
`openshift-sdn-ovs` Red Hat:openshift:3.0::el7	before 0:3.0.1.0-1.git.529.dcab62c.el7ose	0:3.0.1.0-1.git.529.dcab62c.el7ose
`tuned-profiles-openshift-node` Red Hat:openshift:3.0::el7	before 0:3.0.1.0-1.git.529.dcab62c.el7ose	0:3.0.1.0-1.git.529.dcab62c.el7ose

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD, OSV

References

Show 6 moreShow less