Resource management error in Kubernetes - CVE-2025-0426

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU104215

Resource management error in Kubernetes - CVE-2025-0426

Published: February 26, 2025


Vulnerability identifier: #VU104215
CSH Severity: Medium
CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-0426
CWE-ID: CWE-399
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to improper management of internal resources within the application when handling HTTP requests at the "/checkpoint" endpoint. A remote attacker can send a large number of HTTP requests to the affected endpoint and perform a denial of service (DoS) attack by filling up the disk space.


Affected software

Kubernetes
Netcool Operations Insight
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data
openEuler
kubernetes
kubernetes-node
kubernetes-master
kubernetes-kubelet
kubernetes-kubeadm
kubernetes-help
kubernetes-client
OpenShift Data Foundation (formerly OpenShift Container Storage)

How to mitigate CVE-2025-0426

Install updates from vendor's website.

Kubernetes - addressed in versions 1.29.14, 1.30.10, 1.31.6, 1.32.2
Netcool Operations Insight - update to 1.6.15
IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data - update to 5.2.2
kubernetes - update to 1.29.1-11
kubernetes-node - update to 1.29.1-11
kubernetes-master - update to 1.29.1-11
kubernetes-kubelet - update to 1.29.1-11
kubernetes-kubeadm - update to 1.29.1-11
kubernetes-help - update to 1.29.1-11
kubernetes-client - update to 1.29.1-11
OpenShift Data Foundation (formerly OpenShift Container Storage) - addressed in versions 4, 4.18.0

External References

Related Security Bulletins