CVE-2015-5250: Improper Input Validation

December 20, 2021

The API server in OpenShift Origin 1.0.5 allows remote attackers to cause a denial of service (master process crash) via crafted JSON data.

References

github.com/advisories/GHSA-rf3m-mhv7-x39f
github.com/openshift/origin/commit/dace5075e31b74703e944b6b3ebe8836be8d1b9a
github.com/openshift/origin/issues/4374
nvd.nist.gov/vuln/detail/CVE-2015-5250
web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-5250

Code Behaviors & Features

Detect and mitigate CVE-2015-5250 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →