Skip to content

CVE-2024-12401

CVE.org · Published

Historical CVEs JSON AI instructions

Record status: Published
Identifier year (not publication year): 2024
Source publication: Dec 12, 2024
Source updated: Jun 26, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

Cert-manager: potential dos when parsing specially crafted pem inputs

A flaw was found in the cert-manager package. This flaw allows an attacker who can modify PEM data that the cert-manager reads, for example, in a Secret resource, to use large amounts of CPU in the cert-manager controller pod to effectively create a denial-of-service (DoS) vector for the cert-manager in the cluster.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

cert-manager

Vendor: Unknown
Product: Unknown
Platforms: Unknown
Default status: unaffected
Package: cert-manager
Package collection: https://github.com/cert-manager/cert-manager

cert-manager · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
0	`affected`	semver	Unavailable	1.12.14	None listed
1.13.0-alpha.0	`affected`	semver	Unavailable	1.15.4	None listed
1.16.0-alpha.0	`affected`	semver	Unavailable	1.16.2	None listed

cert-manager Operator for Red Hat OpenShift

Vendor: Red Hat
Product: cert-manager Operator for Red Hat OpenShift
Platforms: Unknown
Default status: affected
Package: cert-manager/jetstack-cert-manager-acmesolver-rhel9
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

cert-manager Operator for Red Hat OpenShift

Vendor: Red Hat
Product: cert-manager Operator for Red Hat OpenShift
Platforms: Unknown
Default status: affected
Package: cert-manager/jetstack-cert-manager-rhel9
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

cert-manager Operator for Red Hat OpenShift

Vendor: Red Hat
Product: cert-manager Operator for Red Hat OpenShift
Platforms: Unknown
Default status: affected
Package: cert-manager-operator-bundle-container
Package collection: https://catalog.redhat.com/software/containers/

No explicit version tuples; consult this entry's default status.

cert-manager Operator for Red Hat OpenShift

Vendor: Red Hat
Product: cert-manager Operator for Red Hat OpenShift
Platforms: Unknown
Default status: affected
Package: cert-manager-operator-container
Package collection: https://catalog.redhat.com/software/containers/

No explicit version tuples; consult this entry's default status.

Cryostat 3

Vendor: Red Hat
Product: Cryostat 3
Platforms: Unknown
Default status: affected
Package: cryostat-tech-preview/cryostat-rhel8-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Multicluster Engine for Kubernetes

Vendor: Red Hat
Product: Multicluster Engine for Kubernetes
Platforms: Unknown
Default status: affected
Package: multicluster-engine/assisted-service-8-rhel8
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Multicluster Engine for Kubernetes

Vendor: Red Hat
Product: Multicluster Engine for Kubernetes
Platforms: Unknown
Default status: affected
Package: multicluster-engine/assisted-service-9-rhel9
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

OpenShift Serverless

Vendor: Red Hat
Product: OpenShift Serverless
Platforms: Unknown
Default status: affected
Package: openshift-serverless-1/serving-activator-rhel8
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

OpenShift Serverless

Vendor: Red Hat
Product: OpenShift Serverless
Platforms: Unknown
Default status: affected
Package: openshift-serverless-1/serving-autoscaler-hpa-rhel8
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

OpenShift Serverless

Vendor: Red Hat
Product: OpenShift Serverless
Platforms: Unknown
Default status: affected
Package: openshift-serverless-1/serving-autoscaler-rhel8
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

OpenShift Serverless

Vendor: Red Hat
Product: OpenShift Serverless
Platforms: Unknown
Default status: affected
Package: openshift-serverless-1/serving-controller-rhel8
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

OpenShift Serverless

Vendor: Red Hat
Product: OpenShift Serverless
Platforms: Unknown
Default status: affected
Package: openshift-serverless-1/serving-queue-rhel8
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

OpenShift Serverless

Vendor: Red Hat
Product: OpenShift Serverless
Platforms: Unknown
Default status: affected
Package: openshift-serverless-1/serving-storage-version-migration-rhel8
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

OpenShift Serverless

Vendor: Red Hat
Product: OpenShift Serverless
Platforms: Unknown
Default status: affected
Package: openshift-serverless-1/serving-webhook-rhel8
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Connectivity Link 1

Vendor: Red Hat
Product: Red Hat Connectivity Link 1
Platforms: Unknown
Default status: affected
Package: rhcl-operator-bundle-container
Package collection: https://catalog.redhat.com/software/containers/

No explicit version tuples; consult this entry's default status.

Red Hat Connectivity Link 1

Vendor: Red Hat
Product: Red Hat Connectivity Link 1
Platforms: Unknown
Default status: affected
Package: rhcl-operator-container
Package collection: https://catalog.redhat.com/software/containers/

No explicit version tuples; consult this entry's default status.

Red Hat OpenShift Container Platform 4

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4
Platforms: Unknown
Default status: affected
Package: openshift4/ose-agent-installer-api-server-rhel9
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenShift Container Platform 4

Vendor: Red Hat
Product: Red Hat OpenShift Container Platform 4
Platforms: Unknown
Default status: affected
Package: openshift4/ose-contour-rhel8
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat Openshift Data Foundation 4

Vendor: Red Hat
Product: Red Hat Openshift Data Foundation 4
Platforms: Unknown
Default status: affected
Package: odf4/rook-ceph-rhel8-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.

Red Hat OpenShift GitOps

Vendor: Red Hat
Product: Red Hat OpenShift GitOps
Platforms: Unknown
Default status: affected
Package: openshift-gitops-1/gitops-rhel8-operator
Package collection: https://access.redhat.com/downloads/content/package-browser/

No explicit version tuples; consult this entry's default status.