In all Kubernetes versions prior to v1.11.8, v1.12.6, and v1.13.4, users that are authorized to make patch requests to the Kubernetes API Server can send a specially crafted patch of type "json-patch" (e.g. `kubectl patch --type json` or `"Content-Type: application/json-patch+json"`) that consumes excessive resources while processing, causing a Denial of Service on the API Server.

An update of the kubernetes package has been released.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3239 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing     Kubernetes application platform solution designed for on-premise or private     cloud deployments.

    Security Fix(es):

    * kubernetes: YAML parsing vulnerable to Billion Laughs attack, allowing for remote denial of service     (CVE-2019-11253)

    * kubernetes: Incomplete fixes for CVE-2019-1002101 and CVE-2019-11246, kubectl cp potential directory     traversal (CVE-2019-11249)

    * kube-apiserver: DoS with crafted patch of type json-patch (CVE-2019-1002100)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1851 advisory.

    Red Hat OpenShift Container Platform is Red Hat's cloud computing     Kubernetes application platform solution designed for on-premise or private     cloud deployments.

    Security Fix(es):

    * web-console: XSS in OAuth server /oauth/token/request endpoint     (CVE-2019-3876)

    * jenkins-plugin-token-macro: XML External Entity processing the ${XML}     macro (CVE-2019-10337)

    * kube-apiserver: DoS with crafted patch of type json-patch     (CVE-2019-1002100)

    For more details about the security issue(s), including the impact, a CVSS     score, acknowledgments, and other related information, refer to the CVE     page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Kubernetes installed on the remote host is version 1.x prior to 1.11.8, 1.12.x prior to 1.12.6 or 1.13.x prior to 1.13.4. It is, therefore, affected by a denial of service vulnerability in the API server. An authenticated, remote attacker can exploit this via a specially crafted patch request of type json-patch to cause the API Server to stop responding.

ID	Name	Product	Family	Severity
140706	Photon OS 3.0: Kubernetes PHSA-2020-3.0-0142	Nessus	PhotonOS Local Security Checks	medium
130384	RHEL 7 : OpenShift Container Platform 3.10 atomic-openshift (RHSA-2019:3239)	Nessus	Red Hat Local Security Checks	medium
127032	RHEL 7 : OpenShift Container Platform 3.11 (RHSA-2019:1851)	Nessus	Red Hat Local Security Checks	medium
123831	Kubernetes 1.x < 1.11.8 / 1.12.x < 1.12.6 / 1.13.x < 1.13.4 API server DOS	Nessus	CGI abuses	medium

Detections

Analytics

CVE-2019-1002100

medium

Tenable Plugins

medium

medium

medium

medium