CVE-2023-48713

Katalog CVE

CVSS 5.3 · Medium EPSS 0,87%

Kerentanan Uncontrolled Resource Consumption pada knative serving. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler from an unbound memory allocation bug. This is a DoS vulnerability, where a non-privileged Knative user can cause a DoS for the cluster. This issue has been patched in version 0.39.0.

Rincian

Terbit di NVD

28 November 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption

EPSS (30 hari)

0,87% peluang dieksploitasi; lebih tinggi dari 57,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/knative/serving/commit/012ee2509231b80b7842139bfabc30516d3026ca patch
• https://github.com/knative/serving/commit/101f814112b9ca0767f457e7e616b46205551cf1 patch
• https://github.com/knative/serving/commit/fff40ef7bac9be8380ec3d1c70fc15b57093382a patch
• https://github.com/knative/serving/security/advisories/GHSA-qmvj-4qr9-v547 advisory pihak ketiga