CVE-2022-41723
CVE Details
Last Update
8/16/2024
NIST CVE Summary
A maliciously crafted HTTP/2 stream could cause excessive CPU consumption in the HPACK decoder, sufficient to cause a denial of service from a small number of small requests.
Our Official Summary
CVE exists in coredns that’s being used in k8s 1.28.11. Affects only k8s version 1.28.11.For customer workload clusters, workaround is to use k8s version 1.29+. For Palette Self Hosted cluster, a future release will upgrade to 1.29+.
CVE Severity
Status
Ongoing
Affected Products & Versions
- Palette VerteX 4.4.11
- Palette VerteX 4.4.14
Revision History
- 1.0 07/16/2024 Initial Publication
- 2.0 08/16/2024 Added palette VerteX 4.4.14 to Affected Products