CVE-2022-31074

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-31074
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-31074.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-31074
Aliases
Published
2022-07-11T20:10:10Z
Modified
2026-04-10T04:47:51.624307Z
Severity
  • 4.5 (Medium) CVSS_V3 - CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
Summary
KubeEdge Cloud AdmissionController component DoS
Details

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versions 1.11.1, 1.10.2, and 1.9.4, several endpoints in the Cloud AdmissionController may be susceptible to a DoS attack if an HTTP request containing a very large Body is sent to it. The consequence of the exhaustion is that the Cloud AdmissionController will be in denial of service. This bug has been fixed in Kubeedge 1.11.1, 1.10.2, and 1.9.4. There is currently no known workaround.

Database specific 
{
    "cwe_ids": [
        "CWE-400"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/31xxx/CVE-2022-31074.json",
    "cna_assigner": "GitHub_M"
}
References

Affected packages

Git / github.com/kubeedge/kubeedge

Affected ranges

Type
GIT
Repo
https://github.com/kubeedge/kubeedge
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
ecca82fd5d0b0891dbd562f4d4349443d958b9df
Last affected
24b146e19e8b8d9171851673ff60162711ac71c9
Database specific 
{
    "versions": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.9.4"
        },
        {
            "last_affected": "= 1.11.0"
        }
    ]
}
Type
GIT
Repo
https://github.com/kubeedge/kubeedge
Events
Introduced
3803951602f938d9d90d74957eb0fbc238142101
Fixed
27a6957ee7685884a7d9b3d87c13f61625cb3bc9
Database specific 
{
    "versions": [
        {
            "introduced": "1.10.0"
        },
        {
            "fixed": "1.10.2"
        }
    ]
}

Affected versions

v0.*
v0.1
v0.2
v0.2.1
v0.3.0-beta.0
v1.*
v1.0.0
v1.1.0-beta.0
v1.10.0
v1.10.0-beta.0
v1.10.1
v1.11.0
v1.11.0-alpha.0
v1.11.0-beta.0
v1.2.0-beta.0
v1.3.0
v1.3.0-alpha.0
v1.3.0-beta.0
v1.4.0-alpha.0
v1.4.0-beta.0
v1.5.0-beta.0
v1.6.0-beta.0
v1.7.0
v1.7.0-beta.0
v1.8.0-beta.0
v1.9.0
v1.9.0-beta.0
v1.9.1
v1.9.2
v1.9.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-31074.json"