Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
Excessive CPU usage from malicious MIME headers in Kubernetes
published 4 months ago
Summary
A vulnerability in Kubernetes' DNS node cache can cause high CPU usage if a malicious MIME header is received. This could slow down your system. To protect yourself, update your Kubernetes DNS node cache to the latest version.
What to do
- Update cleanstart kubernetes-dns-node-cache to version 1.25.0-r5.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | kubernetes-dns-node-cache |
< 1.25.0-r5 Fix: upgrade to 1.25.0-r5
|
Original advisory text
Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU
Multiple security vulnerabilities affect the kubernetes-dns-node-cache package. Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU. See references for individual vulnerability details.
References
- https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
- https://osv.dev/vulnerability/CVE-2026-27145 URL
- https://osv.dev/vulnerability/CVE-2026-42504 URL
- https://osv.dev/vulnerability/CVE-2026-42507 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-27145 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-42504 URL
- https://nvd.nist.gov/vuln/detail/CVE-2026-42507 URL
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Timeline
Published10 Jun 2026
Updated23 Jun 2026
First seen23 Jun 2026
Sources
CLEANSTART-2026-VQ22894 · OSV
Track software like this
Free during beta