# \#cve
**URL:** https://discuss.kubernetes.io/tag/cve/61.md
[Latest](https://discuss.kubernetes.io/latest.md) · [Categories](https://discuss.kubernetes.io/categories.md) · [Tags](https://discuss.kubernetes.io/tags.md)
---
## [\[Security Advisory\] \[CSI snapshot-controller\] CVE-2020-8569: snapshot-controller DoS](https://discuss.kubernetes.io/t/security-advisory-csi-snapshot-controller-cve-2020-8569-snapshot-controller-dos/13732)
**Author:** [@castrojo](https://discuss.kubernetes.io/u/castrojo)\
**Replies:** 1\
**Last updated:** [December 15, 2020, 5:24pm UTC](https://discuss.kubernetes.io/t/security-advisory-csi-snapshot-controller-cve-2020-8569-snapshot-controller-dos/13732 "2020-12-15T17:24:13Z")
(Posting on behalf of Tim Allclair: original post) Hello Kubernetes Community, A security issue was discovered in the CSI snapshot-controller that could lead to a denial of service attack via authorized API requests. T…
---
## [\[ANNOUNCE\] Security release of kubernetes-csi sidecars - CVE-2019-11255](https://discuss.kubernetes.io/t/announce-security-release-of-kubernetes-csi-sidecars-cve-2019-11255/8679)
**Author:** [@tallclair](https://discuss.kubernetes.io/u/tallclair)\
**Replies:** 0\
**Last updated:** [November 14, 2019, 8:23pm UTC](https://discuss.kubernetes.io/t/announce-security-release-of-kubernetes-csi-sidecars-cve-2019-11255/8679 "2019-11-14T20:23:08Z")
Hello Kubernetes Community, A security issue has been found in the kubernetes-csi external-provisioner, external-snapshotter, and external-resizer sidecars that impacts most versions of the sidecars bundled in Container…
---
## [\[ANNOUNCE\] CVE-2019-11253: denial of service vulnerability from malicious YAML or JSON payloads](https://discuss.kubernetes.io/t/announce-cve-2019-11253-denial-of-service-vulnerability-from-malicious-yaml-or-json-payloads/8349)
**Author:** [@CJ\_Cullen](https://discuss.kubernetes.io/u/CJ_Cullen)\
**Replies:** 0\
**Last updated:** [October 16, 2019, 5:15pm UTC](https://discuss.kubernetes.io/t/announce-cve-2019-11253-denial-of-service-vulnerability-from-malicious-yaml-or-json-payloads/8349 "2019-10-16T17:15:40Z")
Hello Kubernetes Community, A denial of service vulnerability in the Kubernetes API Server has been disclosed publicly, and assigned CVE-2019-11253. This vulnerability has been given an initial severity of High, with a …
---
## [\[ANNOUNCE\] Security release of kubectl versions v1.16.0 / 1.15.4 / 1.14.7 and 1.13.11 - CVE-2019-11251](https://discuss.kubernetes.io/t/announce-security-release-of-kubectl-versions-v1-16-0-1-15-4-1-14-7-and-1-13-11-cve-2019-11251/7993)
**Author:** [@lukehinds](https://discuss.kubernetes.io/u/lukehinds)\
**Replies:** 0\
**Last updated:** [September 18, 2019, 5:54pm UTC](https://discuss.kubernetes.io/t/announce-security-release-of-kubectl-versions-v1-16-0-1-15-4-1-14-7-and-1-13-11-cve-2019-11251/7993 "2019-09-18T17:54:41Z")
Hello Kubernetes Community, A security issue was discovered in kubectl versions v1.13.10, v1.14.6, and v1.15.3. The issue is of a medium severity and upgrading of kubectl is encouraged to fix the vulnerability. Am I vu…
---
## [Security regression in Kubernetes kubelet v1.13.6 and v1.14.2 only - CVE-2019-11245](https://discuss.kubernetes.io/t/security-regression-in-kubernetes-kubelet-v1-13-6-and-v1-14-2-only-cve-2019-11245/6584)
**Author:** [@philips](https://discuss.kubernetes.io/u/philips)\
**Replies:** 0\
**Last updated:** [May 30, 2019, 9:59pm UTC](https://discuss.kubernetes.io/t/security-regression-in-kubernetes-kubelet-v1-13-6-and-v1-14-2-only-cve-2019-11245/6584 "2019-05-30T21:59:25Z")
Hello Kubernetes Community- A security-related issue was discovered in kubelet versions v1.13.6 and v1.14.2. The issue is medium severity and can be mitigated with a pod spec configuration change OR by downgrading\* kube…
---
## [Kubernetes Security Announcement - Linux Kernel memory cgroups escape via sctp - CVE-2019-3874](https://discuss.kubernetes.io/t/kubernetes-security-announcement-linux-kernel-memory-cgroups-escape-via-sctp-cve-2019-3874/5594)
**Author:** [@philips](https://discuss.kubernetes.io/u/philips)\
**Replies:** 1\
**Last updated:** [March 25, 2019, 11:03am UTC](https://discuss.kubernetes.io/t/kubernetes-security-announcement-linux-kernel-memory-cgroups-escape-via-sctp-cve-2019-3874/5594 "2019-03-25T11:03:25Z")
Hello Kubernetes Community- A security issue was discovered in the Linux Kernel that affects cgroup memory isolation via the esoteric sctp network transport. The issue is Medium severity and blacklisting the sctp kernel…
---
## [Kubernetes Security Announcement - v1.11.8, 1.12.6, 1.13.4 released to address medium severity CVE-2019-1002100](https://discuss.kubernetes.io/t/kubernetes-security-announcement-v1-11-8-1-12-6-1-13-4-released-to-address-medium-severity-cve-2019-1002100/5147)
**Author:** [@CJ\_Cullen](https://discuss.kubernetes.io/u/CJ_Cullen)\
**Replies:** 0\
**Last updated:** [March 1, 2019, 4:57pm UTC](https://discuss.kubernetes.io/t/kubernetes-security-announcement-v1-11-8-1-12-6-1-13-4-released-to-address-medium-severity-cve-2019-1002100/5147 "2019-03-01T16:57:32Z")
Hello Kubernetes Community, A denial of service vulnerability was reported in kube-apiserver in which authorized users with API write permissions can cause the API server to consume excessive resources while handling a …