CVE-2024-29893
published 2024-03-29CVE-2024-29893: Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of ArgoCD starting from v2.4 have a bug where the ArgoCD repo-server…
PriorityP335medium6.5CVSS 3.1
AVNACLPRLUINSUCNINAH
EPSS
0.97%
57.5th percentile
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of ArgoCD starting from v2.4 have a bug where the ArgoCD repo-server component is vulnerable to a Denial-of-Service attack vector. Specifically, it's possible to crash the repo server component through an out of memory error by pointing it to a malicious Helm registry. The loadRepoIndex() function in the ArgoCD's helm package, does not limit the size nor time while fetching the data. It fetches it and creates a byte slice from the retrieved data in one go. If the registry is implemented to push data continuously, the repo server will keep allocating memory until it runs out of it. A patch for this vulnerability has been released in v2.10.3, v2.9.8, and v2.8.12.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| argoproj | argo-cd | — | — |
| argoproj | argo-cd | — | — |
| argoproj | argo-cd | — | — |
| argoproj | argo_cd | >= 2.10.0 < 2.10.5 | 2.10.5 |
| argoproj | argo_cd | >= 2.4.0 < 2.8.14 | 2.8.14 |
| argoproj | argo_cd | >= 2.9.0 < 2.9.10 | 2.9.10 |
| github.com | argoproj_argo-cd_v2 | >= 2.10.0 < 2.10.5 | 2.10.5 |
| github.com | argoproj_argo-cd_v2 | >= 2.4.0 < 2.8.14 | 2.8.14 |
| github.com | argoproj_argo-cd_v2 | >= 2.9.0 < 2.9.10 | 2.9.10 |
CVSS provenance
nvdv3.16.5MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
vendor_redhat6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
argo-cd: uncontrolled memory allocation vulnerability
vendor_redhat·2024-03-29·CVSS 6.5
CVE-2024-29893 [MEDIUM] CWE-400 argo-cd: uncontrolled memory allocation vulnerability
argo-cd: uncontrolled memory allocation vulnerability
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of ArgoCD starting from v2.4 have a bug where the ArgoCD repo-server component is vulnerable to a Denial-of-Service attack vector. Specifically, it's possible to crash the repo server component through an out of memory error by pointing it to a malicious Helm registry. The loadRepoIndex() function in the ArgoCD's helm package, does not limit the size nor time while fetching the data. It fetches it and creates a byte slice from the retrieved data in one go. If the registry is implemented to push data continuously, the repo server will keep allocating memory until it runs out of it. A patch for this vulnerability has been released in v2.10.3, v2.9.8, a
OSV
Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2
osv·2024-04-16
CVE-2024-29893 Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2
Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2
Out of memory crash from malicious Helm registry in github.com/argoproj/argo-cd/v2
OSV
ArgoCD's repo server has Uncontrolled Resource Consumption vulnerability
osv·2024-03-29
CVE-2024-29893 [MEDIUM] ArgoCD's repo server has Uncontrolled Resource Consumption vulnerability
ArgoCD's repo server has Uncontrolled Resource Consumption vulnerability
### Impact
All versions of ArgoCD starting from v2.4 have a bug where the ArgoCD repo-server component is vulnerable to a Denial-of-Service attack vector. Specifically, it's possible to crash the repo server component through an out of memory error by pointing it to a malicious Helm registry.
The loadRepoIndex() function in the ArgoCD's helm package, does not limit the size nor time while fetching the data. It fetches it and creates a byte slice from the retrieved data in one go. If the registry is implemented to push data continuously, the repo server will keep allocating memory until it runs out of it.
### Patches
A patch for this vulnerability has been released in the following Argo CD versions:
v2.10.5
v2.9.10
GHSA
ArgoCD's repo server has Uncontrolled Resource Consumption vulnerability
ghsa·2024-03-29
CVE-2024-29893 [MEDIUM] CWE-400 ArgoCD's repo server has Uncontrolled Resource Consumption vulnerability
ArgoCD's repo server has Uncontrolled Resource Consumption vulnerability
### Impact
All versions of ArgoCD starting from v2.4 have a bug where the ArgoCD repo-server component is vulnerable to a Denial-of-Service attack vector. Specifically, it's possible to crash the repo server component through an out of memory error by pointing it to a malicious Helm registry.
The loadRepoIndex() function in the ArgoCD's helm package, does not limit the size nor time while fetching the data. It fetches it and creates a byte slice from the retrieved data in one go. If the registry is implemented to push data continuously, the repo server will keep allocating memory until it runs out of it.
### Patches
A patch for this vulnerability has been released in the following Argo CD versions:
v2.10.5
v2.9.10
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://github.com/argoproj/argo-cd/commit/14f681e3ee7c38731943b98f92277e88a3db109dhttps://github.com/argoproj/argo-cd/commit/36b8a12a38f8d92d55bffc81deed44389bf6eb59https://github.com/argoproj/argo-cd/commit/3e5a878f6e30d935fa149723ea2a2e93748fcdddhttps://github.com/argoproj/argo-cd/security/advisories/GHSA-jhwx-mhww-rgc3https://github.com/argoproj/argo-cd/commit/14f681e3ee7c38731943b98f92277e88a3db109dhttps://github.com/argoproj/argo-cd/commit/36b8a12a38f8d92d55bffc81deed44389bf6eb59https://github.com/argoproj/argo-cd/commit/3e5a878f6e30d935fa149723ea2a2e93748fcdddhttps://github.com/argoproj/argo-cd/security/advisories/GHSA-jhwx-mhww-rgc3
2024-03-29
Published