Vulnerability GO-2024-3282
Unknown
UNKNOWN RISK
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
1 year ago
November 21, 2024 at 07:52 PM UTC
Potential slowdown / DoS when parsing specially crafted PEM inputs in github.com/cert-manager/cert-manager
v0.0.1 - v1.12.13 and v1.13.0-alpha.0 - v1.15.3 and v1.16.0-alpha.0 - v1.16.1
v0.0.1 - v1.12.13 and v1.13.0-alpha.0 - v1.15.3 and v1.16.0-alpha.0 - v1.16.1
Summary
Potential slowdown / DoS when parsing specially crafted PEM inputs in github.com/cert-manager/cert-manager
Details
Potential slowdown / DoS when parsing specially crafted PEM inputs in github.com/cert-manager/cert-manager
Related Vulnerabilities
Other vulnerabilities affecting the same packages
High Risk
1 day ago
cert-manager: Direct ACME Challenge resources can bypass Issuer DNS01 solver policy and use ClusterIssuer DNS credentials
v1.18.0 - v1.19.5 and v1.20.0-alpha.0 - v1.20.2 GHSA-8rvj-mm4h-c258
v1.18.0 - v1.19.5 and v1.20.0-alpha.0 - v1.20.2 GHSA-8rvj-mm4h-c258
Unknown
8 months ago
DoS in cert-manager-controller via Specially Crafted DNS Response in github.com/cert-manager/cert-manager
v1.18.0 - v1.18.4 and v1.19.0 - v1.19.2 GO-2026-4399
v1.18.0 - v1.18.4 and v1.19.0 - v1.19.2 GO-2026-4399
Medium Risk
9 months ago
cert-manager-controller DoS via Specially Crafted DNS Response
v1.18.0 - v1.18.4 and v1.19.0 - v1.19.2 GHSA-gx3x-vq4p-mhhv
v1.18.0 - v1.18.4 and v1.19.0 - v1.19.2 GHSA-gx3x-vq4p-mhhv
Medium Risk
1 year ago
cert-manager ha a potential slowdown / DoS when parsing specially crafted PEM inputs
v0.0.1 - v1.12.13 and v1.13.0-alpha.0 - v1.15.3 and v1.16.0-alpha.0 - v1.16.1 GHSA-r4pg-vg54-wxx4
v0.0.1 - v1.12.13 and v1.13.0-alpha.0 - v1.15.3 and v1.16.0-alpha.0 - v1.16.1 GHSA-r4pg-vg54-wxx4
Impacted packages
Timeline
Published
1 year ago
November 21, 2024 at 07:52 PM UTC
Fixed (v1.12.14)
1 year ago
November 07, 2024 at 03:30 PM UTC
Fixed (v1.15.4)
1 year ago
November 19, 2024 at 11:19 AM UTC
Fixed (v1.16.2)
1 year ago
November 20, 2024 at 05:05 PM UTC
Last Modified
8 months ago
February 04, 2026 at 03:32 AM UTC