{"id":"CVE-2024-0793","aliases":["EUVD-2024-3260","GHSA-h7wq-jj8r-qm7p","GO-2024-3277","RHSA-2024:1267","SUSE-SU-2024:1163-1","SUSE-SU-2024:1164-1","SUSE-SU-2024:1165-1","SUSE-SU-2024:1166-1","SUSE-SU-2024:1166-2","SUSE-SU-2024:3341-1","SUSE-SU-2024:3343-1","SUSE-SU-2025:02423-1","SUSE-SU-2025:02423-2","openSUSE-SU-2024:13715-1","openSUSE-SU-2024:13716-1","openSUSE-SU-2024:13717-1","openSUSE-SU-2024:13718-1","openSUSE-SU-2024:14513-1"],"status":"published","title":"Kube-controller-manager: malformed hpa v1 manifest causes crash","description":"A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn.","severity":{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00594,"percentile":0.48695,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20","CWE-476"],"published":"2024-04-08T12:10:31Z","modified":"2026-10-28T02:31:03Z","fixes":[{"ecosystem":"Go","package":"k8s.io/kubernetes","fixed_in":["1.27.0-alpha.1"],"sources":["ghsa","osv"]},{"ecosystem":"Red Hat:openshift:4.12::el8","package":"openshift","fixed_in":["0:4.12.0-202403042037.p0.g9946c63.assembly.stream.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.12::el8","package":"openshift-hyperkube","fixed_in":["0:4.12.0-202403042037.p0.g9946c63.assembly.stream.el8"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.12::el9","package":"openshift","fixed_in":["0:4.12.0-202403042037.p0.g9946c63.assembly.stream.el9"],"sources":["osv"]},{"ecosystem":"Red Hat:openshift:4.12::el9","package":"openshift-hyperkube","fixed_in":["0:4.12.0-202403042037.p0.g9946c63.assembly.stream.el9"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP5","package":"kubernetes1.23","fixed_in":["1.23.17-150500.3.9.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"kubernetes1.23","fixed_in":["1.23.17-150500.3.9.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP5","package":"kubernetes1.24","fixed_in":["1.24.17-150500.3.13.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"kubernetes1.24","fixed_in":["1.24.17-150500.3.13.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP5","package":"kubernetes1.25","fixed_in":["1.25.16-150400.9.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"kubernetes1.25","fixed_in":["1.25.16-150400.9.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP5","package":"kubernetes1.26","fixed_in":["1.26.14-150400.9.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"kubernetes1.26","fixed_in":["1.26.14-150400.9.6.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"kubernetes1.26","fixed_in":["1.26.14-150400.9.6.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"kubernetes1.26","fixed_in":["1.26.14-1.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"k8s.io/kubernetes","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.27.0-alpha.1"}]}]},{"source":"osv","ecosystem":"Go","package":"k8s.io/kubernetes","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.27.0-alpha.1"}]}]},{"source":"osv","ecosystem":"Go","package":"k8s.io/kubernetes","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"1.27.0-alpha.1"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-202403042037.p0.g9946c63.assembly.stream.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el8","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-202403042037.p0.g9946c63.assembly.stream.el8"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"openshift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-202403042037.p0.g9946c63.assembly.stream.el9"}]}]},{"source":"osv","ecosystem":"Red Hat:openshift:4.12::el9","package":"openshift-hyperkube","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:4.12.0-202403042037.p0.g9946c63.assembly.stream.el9"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP5","package":"kubernetes1.23","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.17-150500.3.9.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kubernetes1.23","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.17-150500.3.9.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP5","package":"kubernetes1.24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.17-150500.3.13.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kubernetes1.24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.17-150500.3.13.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP5","package":"kubernetes1.25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.16-150400.9.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kubernetes1.25","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.25.16-150400.9.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP5","package":"kubernetes1.26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.14-150400.9.6.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"kubernetes1.26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.14-150400.9.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Containers 15 SP6","package":"kubernetes1.26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.14-150400.9.6.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"kubernetes1.24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.17-150400.9.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"kubernetes1.24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.17-150400.9.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"kubernetes1.24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.17-150400.9.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"kubernetes1.24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.17-150400.9.16.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"kubernetes1.24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.17-150300.7.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"kubernetes1.24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.17-150300.7.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"kubernetes1.24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.17-150300.7.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"kubernetes1.24","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.24.17-150300.7.6.1"}]}],"bundled":9},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS","package":"kubernetes1.23","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.17-150300.7.12.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS","package":"kubernetes1.23","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.17-150300.7.12.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS","package":"kubernetes1.23","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.17-150300.7.12.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP3-LTSS","package":"kubernetes1.23","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.17-150300.7.12.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP4-LTSS","package":"kubernetes1.23","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.17-150300.7.12.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP3","package":"kubernetes1.23","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.17-150300.7.12.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP4","package":"kubernetes1.23","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.17-150300.7.12.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 7.1","package":"kubernetes1.23","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.23.17-150300.7.12.1"}]}],"bundled":5},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"kubernetes1.26","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.26.14-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"govulncheck-vulndb","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.0.20241119T173509-1.1"}]}],"bundled":10}],"products":[{"vendor":"red hat","product":"red hat openshift container platform 4"},{"vendor":"red hat","product":"red hat openshift container platform 4.12"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2024:0741","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/errata/RHSA-2024:1267","tags":["vendor-advisory","x_refsource_REDHAT","advisory","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-0793","tags":["vdb-entry","x_refsource_REDHAT","advisory","web","report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2214402","tags":["issue-tracking","x_refsource_REDHAT","report","web"]},{"url":"https://github.com/openshift/kubernetes/pull/1876","tags":["fix","web","article"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-0793","tags":["advisory"]},{"url":"https://github.com/kubernetes/kubernetes/issues/107038#issuecomment-1911327145","tags":["web"]},{"url":"https://pkg.go.dev/vuln/GO-2024-3277","tags":["web"]},{"url":"https://github.com/advisories/GHSA-h7wq-jj8r-qm7p","tags":["advisory"]},{"url":"https://access.redhat.com/downloads/content/package-browser/","tags":["web"]},{"url":"https://catalog.redhat.com/software/containers/","tags":["web"]},{"url":"https://github.com/kubernetes","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/0xxx/CVE-2024-0793.json","tags":["advisory"]},{"url":"https://github.com/kubernetes/kubernetes","tags":["package"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_1267.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-0793","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241163-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1219964","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2024-0793","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241164-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241165-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1062303","tags":["report"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241166-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20241166-2/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243341-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1194400","tags":["report"]},{"url":"https://bugzilla.suse.com/1211630","tags":["report"]},{"url":"https://bugzilla.suse.com/1211631","tags":["report"]},{"url":"https://bugzilla.suse.com/1214406","tags":["report"]},{"url":"https://bugzilla.suse.com/1216109","tags":["report"]},{"url":"https://bugzilla.suse.com/1216123","tags":["report"]},{"url":"https://bugzilla.suse.com/1221400","tags":["report"]},{"url":"https://bugzilla.suse.com/1222539","tags":["report"]},{"url":"https://bugzilla.suse.com/1226136","tags":["report"]},{"url":"https://bugzilla.suse.com/1229858","tags":["report"]},{"url":"https://bugzilla.suse.com/1229867","tags":["report"]},{"url":"https://bugzilla.suse.com/1229869","tags":["report"]},{"url":"https://bugzilla.suse.com/1230323","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2021-25743","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2727","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2728","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-39325","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-44487","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-45288","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-24786","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-3177","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2024/suse-su-20243343-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502423-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1212493","tags":["report"]},{"url":"https://bugzilla.suse.com/1229008","tags":["report"]},{"url":"https://bugzilla.suse.com/1241865","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2431","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-22872","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2025/suse-su-202502423-2/","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/CJ6SUNDNOZSHM4PZYYGMBH7233D63JOI/","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2020-8911","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2023-0109","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-24425","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-24426","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-44625","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-52010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-52308","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-52522","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-9526","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2024-0793","title":"Kube-controller-manager: malformed hpa v1 manifest causes crash","description":"A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn.","status":"published","published":"2024-11-17T10:45:50.457Z","modified":"2024-11-17T16:16:49.847Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:34:22.852179Z"}],"euvd":[{"id":"EUVD-2024-3260","description":"A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn.","status":"published","published":"2024-11-17T10:45:50Z","modified":"2024-11-17T16:16:49Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-03T00:04:57.661321Z"}],"ghsa":[{"id":"GHSA-h7wq-jj8r-qm7p","title":"Kubernetes Nil pointer dereference in KCM after v1 HPA patch request","description":"A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn.","status":"published","published":"2024-11-17T12:30:29Z","modified":"2024-11-19T20:25:31Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20","CWE-476"],"updated_at":"2026-11-02T14:38:21.777721Z"}],"nvd":[{"id":"CVE-2024-0793","description":"A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn.","status":"published","published":"2024-11-17T11:15:06.34Z","modified":"2026-06-17T06:54:18.013Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:10:37.281254Z"}],"osv":[{"id":"CVE-2024-0793","title":"Kube-controller-manager: malformed hpa v1 manifest causes crash","description":"A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn.","status":"published","published":"2024-11-17T10:45:50.457Z","modified":"2026-10-28T02:31:03.881114635Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T15:44:37.180532Z"},{"id":"GHSA-h7wq-jj8r-qm7p","title":"Kubernetes Nil pointer dereference in KCM after v1 HPA patch request","description":"A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn.","status":"published","published":"2024-11-17T12:30:29Z","modified":"2026-09-10T03:50:20.81142328Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-20","CWE-476"],"updated_at":"2026-11-02T15:46:48.920784Z"},{"id":"RHSA-2024:1267","title":"Red Hat Security Advisory: OpenShift Container Platform 4.12.53 packages and security update","status":"published","published":"2024-09-30T22:27:21Z","modified":"2026-10-20T10:02:36Z","cvss":[{"version":"3.1","score":7.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"GO-2024-3277","title":"Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes","description":"Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes","status":"published","published":"2024-11-19T17:20:31Z","modified":"2026-02-04T03:22:27.460871Z","updated_at":"2026-11-02T15:47:01.453823Z"},{"id":"openSUSE-SU-2024:13715-1","title":"kubernetes1.23-apiserver-1.23.17-7.1 on GA media","description":"These are all security issues fixed in the kubernetes1.23-apiserver-1.23.17-7.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:29:07.763129Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"openSUSE-SU-2024:13716-1","title":"kubernetes1.24-apiserver-1.24.17-3.1 on GA media","description":"These are all security issues fixed in the kubernetes1.24-apiserver-1.24.17-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:39:34.54325Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"openSUSE-SU-2024:13717-1","title":"kubernetes1.25-apiserver-1.25.16-3.1 on GA media","description":"These are all security issues fixed in the kubernetes1.25-apiserver-1.25.16-3.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:29:10.264609Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"openSUSE-SU-2024:13718-1","title":"kubernetes1.26-apiserver-1.26.14-1.1 on GA media","description":"These are all security issues fixed in the kubernetes1.26-apiserver-1.26.14-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:05:38.063481Z","updated_at":"2026-11-02T16:58:36.327643Z"},{"id":"openSUSE-SU-2024:14513-1","title":"govulncheck-vulndb-0.0.20241119T173509-1.1 on GA media","description":"These are all security issues fixed in the govulncheck-vulndb-0.0.20241119T173509-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-11-20T00:00:00Z","modified":"2026-02-04T03:52:10.55803Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"SUSE-SU-2024:1163-1","title":"Security update for kubernetes1.23","description":"This update for kubernetes1.23 fixes the following issues:\n\n- CVE-2024-0793: Fixed a DoS caused via a malformed HPA v1 manifest. (bsc#1219964)\n","status":"published","published":"2024-04-08T12:10:31Z","modified":"2026-02-04T04:36:45.87363Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:1164-1","title":"Security update for kubernetes1.23","description":"This update for kubernetes1.23 fixes the following issues:\n\n- CVE-2024-0793: Fixed a DoS caused via a malformed HPA v1 manifest. (bsc#1219964)\n","status":"published","published":"2024-04-08T12:10:52Z","modified":"2026-02-04T02:43:36.132798Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:1165-1","title":"Security update for kubernetes1.23","description":"This update for kubernetes1.23 fixes the following issues:\n\n- Upgrade from v1.25.14 to v1.25.16\n- CVE-2024-0793: Fixed a DoS caused via a malformed HPA v1 manifest. (bsc#1219964)\n","status":"published","published":"2024-04-08T12:11:10Z","modified":"2026-02-04T03:45:48.241081Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:1166-1","title":"Security update for kubernetes1.23","description":"This update for kubernetes1.23 fixes the following issues:\n\n- Upgrade from v1.26.9 to v1.26.14\n- CVE-2024-0793: Fixed a DoS caused via a malformed HPA v1 manifest. (bsc#1219964)\n","status":"published","published":"2024-04-08T12:11:24Z","modified":"2026-02-04T03:52:19.179905Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:1166-2","title":"Security update for kubernetes1.23","description":"This update for kubernetes1.23 fixes the following issues:\n\n- Upgrade from v1.26.9 to v1.26.14\n- CVE-2024-0793: Fixed a DoS caused via a malformed HPA v1 manifest. (bsc#1219964)\n","status":"published","published":"2024-08-13T09:03:51Z","modified":"2026-02-04T02:57:16.8227Z","updated_at":"2026-11-02T15:53:54.239786Z"},{"id":"SUSE-SU-2024:3341-1","title":"Security update for kubernetes1.23","description":"This update for kubernetes1.23 fixes the following issues:\n\n- CVE-2021-25743: escape, meta and control sequences in raw data output to terminal not neutralized. (bsc#1194400)\n- CVE-2023-2727: bypass of policies imposed by the ImagePolicyWebhook admission plugin. (bsc#1211630)\n- CVE-2023-2728: bypass of the mountable secrets policy enforced by the ServiceAccount admission plugin. (bsc#1211631)\n- CVE-2023-39325: go1.20: excessive resource consumption when dealing with rapid stream resets. (bsc#1229869)  \n- CVE-2023-44487: google.golang.org/grpc, kube-apiserver: HTTP/2 rapid reset vulnerability. (bsc#1229869)\n- CVE-2023-45288: golang.org/x/net: excessive CPU consumption when processing unlimited sets of headers. (bsc#1229869)\n- CVE-2024-0793: kube-controller-manager pod crash when processing malformed HPA v1 manifests. (bsc#1219964)  \n- CVE-2024-3177: bypass of the mountable secrets policy enforced by the ServiceAccount admission plugin. (bsc#1222539)\n- CVE-2024-24786: github.com/golang/protobuf: infinite loop when unmarshaling invalid JSON. (bsc#1229867)\n\nBug fixes:\n\n- Use -trimpath in non-DBG mode for reproducible builds. (bsc#1062303)\n- Fix multiple issues for successful `kubeadm init` run. (bsc#1214406)\n- Update go to version 1.22.5 in build requirements. (bsc#1229858)\n","status":"published","published":"2024-09-19T14:50:41Z","modified":"2026-02-04T02:53:55.286421Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2024:3343-1","title":"Security update for kubernetes1.24","description":"This update for kubernetes1.24 fixes the following issues:\n\n- CVE-2021-25743: escape, meta and control sequences in raw data output to terminal not neutralized. (bsc#1194400)\n- CVE-2023-2727: bypass of policies imposed by the ImagePolicyWebhook admission plugin. (bsc#1211630)\n- CVE-2023-2728: bypass of the mountable secrets policy enforced by the ServiceAccount admission plugin. (bsc#1211631)\n- CVE-2023-39325: go1.20: excessive resource consumption when dealing with rapid stream resets. (bsc#1229869)  \n- CVE-2023-44487: google.golang.org/grpc, kube-apiserver: HTTP/2 rapid reset vulnerability. (bsc#1229869)\n- CVE-2023-45288: golang.org/x/net: excessive CPU consumption when processing unlimited sets of headers. (bsc#1229869)\n- CVE-2024-0793: kube-controller-manager pod crash when processing malformed HPA v1 manifests. (bsc#1219964)  \n- CVE-2024-3177: bypass of the mountable secrets policy enforced by the ServiceAccount admission plugin. (bsc#1222539)\n- CVE-2024-24786: github.com/golang/protobuf: infinite loop when unmarshaling invalid JSON. (bsc#1229867)\n\nBug fixes:\n\n- Use -trimpath in non-DBG mode for reproducible builds. (bsc#1062303)\n- Fix multiple issues for successful `kubeadm init` run. (bsc#1214406)\n- Update go to version 1.22.5 in build requirements. (bsc#1229858)\n","status":"published","published":"2024-09-19T14:51:26Z","modified":"2026-02-04T02:57:24.002344Z","updated_at":"2026-11-02T15:53:55.639015Z"},{"id":"SUSE-SU-2025:02423-1","title":"Security update for kubernetes1.23","description":"This update for kubernetes1.23 fixes the following issues:\n\n- CVE-2021-25743: Escape terminal special characters in kubectl output (bsc#1194400).\n- CVE-2023-2431: Prevent pods to bypass the seccomp profile enforcement (bsc#1212493).\n- CVE-2024-0793: Advance autoscaling v2 as the preferred API version (bsc#1219964).\n- CVE-2024-3177: Prevent bypassing mountable secrets policy imposed by the ServiceAccount admission plugin (bsc#1222539). \n- CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content (bsc#1241865).\n","status":"published","published":"2025-07-21T08:36:40Z","modified":"2026-03-23T04:49:40.854316Z","updated_at":"2026-11-02T15:53:56.647031Z"},{"id":"SUSE-SU-2025:02423-2","title":"Security update for kubernetes1.23","description":"This update for kubernetes1.23 fixes the following issues:\n\n- CVE-2021-25743: Escape terminal special characters in kubectl output (bsc#1194400).\n- CVE-2023-2431: Prevent pods to bypass the seccomp profile enforcement (bsc#1212493).\n- CVE-2024-0793: Advance autoscaling v2 as the preferred API version (bsc#1219964).\n- CVE-2024-3177: Prevent bypassing mountable secrets policy imposed by the ServiceAccount admission plugin (bsc#1222539). \n- CVE-2025-22872: Properly handle trailing solidus in unquoted attribute value in foreign content (bsc#1241865).\n","status":"published","published":"2025-08-13T00:10:52Z","modified":"2026-02-04T03:20:50.480082Z","updated_at":"2026-11-02T15:53:56.647031Z"}]}}