CVE-2022-31074

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versions 1.11.1, 1.10.2, and 1.9.4, several endpoints in the Cloud AdmissionController may be susceptible to a DoS attack if an HTTP request containing a very large Body is sent to it. The consequence of the exhaustion is that the Cloud AdmissionController will be in denial of service. This bug has been fixed in Kubeedge 1.11.1, 1.10.2, and 1.9.4. There is currently no known workaround.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-400

Affected software

No affected versions have been published.

Timeline

Published: Jul 11, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-310756.5KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versi CVE-2022-310765.7KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In CVE-2022-310775.7KubeEdge is built upon Kubernetes and extends native containerized application orchestration and device management to hosts at the Edge. In CVE-2022-310786.5KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versi CVE-2022-310796.5KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versi CVE-2022-31085.5An issue was discovered in the Linux kernel through 5.16-rc6. kfd_parse_subtype_iolink in drivers/gpu/drm/amd/amdkfd/kfd_crat.c lacks check CVE-2022-310806.5KubeEdge is an open source system for extending native containerized application orchestration capabilities to hosts at Edge. Prior to versi CVE-2022-310816.5HTTP::Daemon is a simple http server class written in perl. Versions prior to 6.15 are subject to a vulnerability which could potentially be CVE-2022-310829.8GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing.CVE-2022-310837.5Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to versions 4.10.11 and 5.2.2,CVE-2022-310848.1LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In version CVE-2022-310856.1LDAP Account Manager (LAM) is a webfrontend for managing entries (e.g. users, groups, DHCP settings) stored in an LDAP directory. In version