CVE-2015-5250: Input Validation
Jordan Liggitt of the Red Hat OpenShift Team reports:
Malformed JSON can cause the OpenShift Master/Broker to exit unexpectedly.
External References: https://github.com/openshift/origin/issues/4374
Acknowledgement:
Red Hat would like to thank Jordan Liggitt of the Red Hat OpenShift Team for reporting this issue.
Other sources
The API server in OpenShift Origin 1.0.5 allows remote attackers to cause a denial of service (master process crash) via crafted JSON data.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-5250?
CVE-2015-5250 is classified as a high severity vulnerability due to its potential to cause a denial of service.
How do I fix CVE-2015-5250?
To fix CVE-2015-5250, upgrade OpenShift Origin to a patched version that addresses this vulnerability.
What does CVE-2015-5250 affect?
CVE-2015-5250 specifically affects OpenShift Origin version 1.0.5.
What type of attack does CVE-2015-5250 enable?
CVE-2015-5250 allows remote attackers to crash the OpenShift Master/Broker by sending malformed JSON data.
Who reported the vulnerability CVE-2015-5250?
CVE-2015-5250 was reported by Jordan Liggitt of the Red Hat OpenShift Team.