CVE-2024-12401 — Cert-manager: potential dos when parsing specially crafted pem inputs
A flaw was found in the cert-manager package. This flaw allows an attacker who can modify PEM data that the cert-manager reads, for example, in a Secret resource, to use large a…
Published: 2024-12-12 · CVSS: 4.4 · CVSS 3.1
A flaw was found in the cert-manager package. This flaw allows an attacker who can modify PEM data that the cert-manager reads, for example, in a Secret resource, to use large amounts of CPU in the cert-manager controller pod to effectively create a denial-of-service (DoS) vector for the cert-manager in the cluster.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7