Vulnerability · Published Nov 28, 2023 · Assigned by GitHub_M

CVE-2023-48713Knative Serving vulnerable to attacker-controlled pod causing denial of service of autoscaler

Medium 6.5

In plain English

A medium-severity uncontrolled resource consumption in serving from knative. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 59% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.9%top 41.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler from an unbound memory allocation bug. This is a DoS vulnerability, where a non-privileged Knative user can cause a DoS for the cluster. This issue has been patched in version 0.39.0.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Go	knative.dev/serving	0.39.0	GHSA-qmvj-4qr9-v547
Go	knative.dev/serving	0.39.0	GO-2023-2355

Affected products (as reported)

Vendor	Product	Versions
knative	serving	< 0.39.0

Weakness: CWE-400 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References

https://github.com/knative/serving/security/advisories/GHSA-qmvj-4qr9-v547 x_refsource_CONFIRM
https://github.com/knative/serving/commit/012ee2509231b80b7842139bfabc30516d3026ca x_refsource_MISC
https://github.com/knative/serving/commit/101f814112b9ca0767f457e7e616b46205551cf1 x_refsource_MISC
https://github.com/knative/serving/commit/fff40ef7bac9be8380ec3d1c70fc15b57093382a x_refsource_MISC