CVE-2018-10885
MEDIUMOpenShift < 3.10.9 - Denial of Service via Malicious Network-Policy Configuration
Title source: llmDescription
In atomic-openshift before version 3.10.9 a malicious network-policy configuration can cause Openshift Routing to crash when using ovs-networkpolicy plugin. An attacker can use this flaw to cause a Denial of Service (DoS) attack on an Openshift 3.9, or 3.7 Cluster.
References (2)
Core 2
Core References
Issue Tracking, Mitigation, Vendor Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10885
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/104688
Scores
CVSS v3
6.5
EPSS
0.0164
EPSS Percentile
73.5%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Details
CWE
CWE-20
Status
published
Products (1)
redhat/openshift
< 3.10.9
Published
Jul 05, 2018
Tracked Since
Feb 18, 2026