Vulnerabilities > CVE-2023-48713 - Unspecified vulnerability in Knative Serving

CVSS 5.3 - MEDIUM

Attack vector

NETWORK

Attack complexity

HIGH

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

high complexity

knative

NVD

Published: 2023-11-28

Updated: 2023-12-01

Summary

Knative Serving builds on Kubernetes to support deploying and serving of applications and functions as serverless containers. An attacker who controls a pod to a degree where they can control the responses from the /metrics endpoint can cause Denial-of-Service of the autoscaler from an unbound memory allocation bug. This is a DoS vulnerability, where a non-privileged Knative user can cause a DoS for the cluster. This issue has been patched in version 0.39.0.

Vulnerable Configurations

Part	Description	Count
Application	Knative Knative Serving 1.11.0 Knative Serving 1.11.1 Knative Serving 1.11.2 Knative Serving 0.1.0 Knative Serving 0.1.1 Knative Serving 0.2.0 Knative Serving 0.2.1 Knative Serving 0.2.2 Knative Serving 0.2.3 Knative Serving 0.3.0 Knative Serving 0.4.0 Knative Serving 0.4.1 Knative Serving 0.5.0 Knative Serving 0.5.1 Knative Serving 0.5.2 Knative Serving 0.6.0 Knative Serving 0.6.1 Knative Serving 0.7.0 Knative Serving 0.7.1 Knative Serving 0.8.0 Knative Serving 0.8.1 Knative Serving 0.9.0 Knative Serving 0.10.0 Knative Serving 0.10.1 Knative Serving 0.11.0 Knative Serving 0.11.1 Knative Serving 0.11.2 Knative Serving 0.12.0 Knative Serving 0.12.1 Knative Serving 0.13.0 Knative Serving 0.13.1 Knative Serving 0.13.2 Knative Serving 0.13.3 Knative Serving 0.14.0 Knative Serving 0.14.1 Knative Serving 0.14.2 Knative Serving 0.14.3 Knative Serving 0.15.0 Knative Serving 0.15.1 Knative Serving 0.15.2 Knative Serving 0.15.3 Knative Serving 0.16.0 Knative Serving 0.17.0 Knative Serving 0.17.1 Knative Serving 0.17.2 Knative Serving 0.17.3 Knative Serving 0.17.4 Knative Serving 0.18.0 Knative Serving 0.18.1 Knative Serving 0.18.2 Knative Serving 0.18.3 Knative Serving 0.19.0 Knative Serving 0.20.0 Knative Serving 0.20.1 Knative Serving 0.20.2 Knative Serving 0.21.0 Knative Serving 0.21.1 Knative Serving 0.22.0 Knative Serving 0.22.1 Knative Serving 0.22.2 Knative Serving 0.22.3 Knative Serving 0.23.0 Knative Serving 0.23.1 Knative Serving 0.23.2 Knative Serving 0.23.3 Knative Serving 0.24.0 Knative Serving 0.24.1 Knative Serving 0.24.2 Knative Serving 0.25.0 Knative Serving 0.25.1 Knative Serving 0.25.2 Knative Serving 0.26.0 Knative Serving 0.26.1 Knative Serving 0.26.2 Knative Serving 0.27.0 Knative Serving 0.27.1 Knative Serving 0.27.2 Knative Serving 0.28.0 Knative Serving 0.28.1 Knative Serving 0.28.2 Knative Serving 0.28.3 Knative Serving 0.28.4 Knative Serving 0.29.0 Knative Serving 0.29.1 Knative Serving 0.29.2 Knative Serving 0.29.3 Knative Serving 0.29.4 Knative Serving 0.29.5 Knative Serving 0.30.0 Knative Serving 0.30.1 Knative Serving 0.30.2 Knative Serving 0.31.0 Knative Serving 0.32.0 Knative Serving 0.32.1 Knative Serving 0.33.0 Knative Serving 0.33.1 Knative Serving 0.33.2 Knative Serving 0.33.3 Knative Serving 0.34.0 Knative Serving 0.34.1 Knative Serving 0.34.2 Knative Serving 0.34.3 Knative Serving 0.34.4 Knative Serving 0.35.0 Knative Serving 0.35.1 Knative Serving 0.35.2 Knative Serving 0.35.3 Knative Serving 0.35.4 Knative Serving 0.35.5 Knative Serving 0.35.6 Knative Serving 0.36.0 Knative Serving 0.36.1 Knative Serving 0.36.2 Knative Serving 0.36.3 Knative Serving 0.36.4 Knative Serving 0.37.0 Knative Serving 0.37.1 Knative Serving 0.37.2 Knative Serving 0.37.3 Knative Serving 0.37.4 Knative Serving 0.37.5 Knative Serving 0.37.6 Knative Serving 0.38.0 Knative Serving 0.38.1 Knative Serving 0.38.2 Knative Serving 0.38.3 Knative Serving 0.38.4 Knative Serving 0.38.5 Knative Serving 0.39.0 Knative Serving 0.39.1 Knative Serving 0.39.2 Knative Serving 1.0.0 Knative Serving 1.0.1 Knative Serving 1.0.2 Knative Serving 1.1.0 Knative Serving 1.1.1 Knative Serving 1.1.2 Knative Serving 1.1.3 Knative Serving 1.1.4 Knative Serving 1.2.0 Knative Serving 1.2.1 Knative Serving 1.2.2 Knative Serving 1.2.3 Knative Serving 1.2.4 Knative Serving 1.2.5 Knative Serving 1.3.0 Knative Serving 1.3.1 Knative Serving 1.3.2 Knative Serving 1.4.0 Knative Serving 1.5.0 Knative Serving 1.5.1 Knative Serving 1.6.0 Knative Serving 1.6.1 Knative Serving 1.6.2 Knative Serving 1.6.3 Knative Serving 1.7.0 Knative Serving 1.7.1 Knative Serving 1.7.2 Knative Serving 1.7.3 Knative Serving 1.7.4 Knative Serving 1.8.0 Knative Serving 1.8.1 Knative Serving 1.8.2 Knative Serving 1.8.3 Knative Serving 1.8.4 Knative Serving 1.8.5 Knative Serving 1.8.6 Knative Serving 1.9.0 Knative Serving 1.9.1 Knative Serving 1.9.2 Knative Serving 1.9.3 Knative Serving 1.9.4 Knative Serving 1.10.0 Knative Serving 1.10.1 Knative Serving 1.10.2 Knative Serving 1.10.3 Knative Serving 1.10.4	177

Summary

Vulnerable Configurations

References