| module: k8s.io/apiextensions-apiserver |
| package: k8s.io/apiextensions-apiserver/pkg/apiserver |
| additional_packages: |
| - module: k8s.io/kubernetes |
| package: k8s.io/kubernetes/staging/src/k8s.io/apiextensions-apiserver/pkg/apiserver |
| symbols: |
| - NewCustomResourceDefinitionHandler |
| versions: |
| - fixed: v1.17.0-alpha.2 |
| versions: |
| - fixed: v0.17.0 |
| description: | |
| A maliciously crafted YAML or JSON message can cause resource |
| exhaustion. |
| published: 2021-04-14T12:00:00Z |
| cve: CVE-2019-11253 |
| symbols: |
| - NewCustomResourceDefinitionHandler |
| links: |
| pr: https://github.com/kubernetes/kubernetes/pull/83261 |
| commit: https://github.com/kubernetes/apiextensions-apiserver/commit/9cfd100448d12f999fbf913ae5d4fef2fcd66871 |
| context: |
| - https://github.com/kubernetes/kubernetes/issues/83253 |
| - https://gist.github.com/bgeesaman/0e0349e94cd22c48bf14d8a9b7d6b8f2 |
