CVE-2024-0793
Fixed in a distro release EPSS <1%CVSS 7.7
A flaw was found in kube-controller-manager. This issue occurs when the initial application of a HPA config YAML lacking a .spec.behavior.scaleUp block causes a denial of service due to KCM pods going into restart churn.
Products: Red Hat OpenShift Container Platform 4, Red Hat OpenShift Container Platform 4.12
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | k8s.io/kubernetes | 1.27.0-alpha.1 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | argo-cd-2.11 | no fix |
| Chainguard | argocd-image-updater | 0.17.0-r1 |
| Chainguard | argocd-image-updater-fips | 0.17.0-r2 |
| Chainguard | aws-efs-csi-driver | 2.1.1-r0 |
| Chainguard | aws-efs-csi-driver-fips | 2.1.1-r0 |
| Red Hat openshift 4.12 | openshift | 0:4.12.0-202403042037.p0.g9946c63.assembly.stream.el8 |
| Red Hat openshift 4.12 | openshift | 0:4.12.0-202403042037.p0.g9946c63.assembly.stream.el9 |
| Red Hat openshift 4.12 | openshift-hyperkube | 0:4.12.0-202403042037.p0.g9946c63.assembly.stream.el8 |
| Red Hat openshift 4.12 | openshift-hyperkube | 0:4.12.0-202403042037.p0.g9946c63.assembly.stream.el9 |
| SUSE Enterprise Storage 7.1 | kubernetes1.23 | 1.23.17-150300.7.12.1 |
| SUSE Enterprise Storage 7.1 | kubernetes1.24 | 1.24.17-150300.7.6.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | kubernetes1.23 | 1.23.17-150300.7.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | kubernetes1.24 | 1.24.17-150300.7.6.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kubernetes1.23 | 1.23.17-150300.7.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | kubernetes1.24 | 1.24.17-150400.9.16.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kubernetes1.23 | 1.23.17-150300.7.12.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | kubernetes1.24 | 1.24.17-150400.9.16.1 |
| SUSE Linux Enterprise Module for Containers 15 SP5 | kubernetes1.23 | 1.23.17-150500.3.9.1 |
| SUSE Linux Enterprise Module for Containers 15 SP5 | kubernetes1.24 | 1.24.17-150500.3.13.1 |
| SUSE Linux Enterprise Module for Containers 15 SP5 | kubernetes1.25 | 1.25.16-150400.9.6.1 |
| SUSE Linux Enterprise Module for Containers 15 SP5 | kubernetes1.26 | 1.26.14-150400.9.6.1 |
| SUSE Linux Enterprise Module for Containers 15 SP6 | kubernetes1.26 | 1.26.14-150400.9.6.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | kubernetes1.23 | 1.23.17-150300.7.12.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | kubernetes1.24 | 1.24.17-150300.7.6.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | kubernetes1.23 | 1.23.17-150300.7.12.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | kubernetes1.24 | 1.24.17-150400.9.16.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | kubernetes1.23 | 1.23.17-150300.7.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | kubernetes1.24 | 1.24.17-150300.7.6.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kubernetes1.23 | 1.23.17-150300.7.12.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | kubernetes1.24 | 1.24.17-150400.9.16.1 |
| Wolfi | argocd-image-updater | 0.17.0-r1 |
| Wolfi | aws-efs-csi-driver | 2.1.1-r0 |
| openSUSE Leap 15.5 | kubernetes1.23 | 1.23.17-150500.3.9.1 |
| openSUSE Leap 15.5 | kubernetes1.24 | 1.24.17-150500.3.13.1 |
| openSUSE Leap 15.5 | kubernetes1.25 | 1.25.16-150400.9.6.1 |
| openSUSE Leap 15.5 | kubernetes1.26 | 1.26.14-150400.9.6.1 |
| openSUSE Tumbleweed | govulncheck-vulndb | 0.0.20241119T173509-1.1 |
| openSUSE Tumbleweed | kubernetes1.26 | 1.26.14-1.1 |