ingress-nginx Validating Admission Controller Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in ingress-nginx versions prior to 1.13.7 and 1.14.3. The issue arises in the validating admission controller feature, where an attacker can send large requests that consume memory. This memory consumption may lead to the ingress-nginx controller pod being terminated or the node running out of memory.

Impact

Exploitation of this vulnerability can cause excessive memory usage, potentially leading to the ingress-nginx controller pod being killed or the node exhausting its memory resources.

Remediation

Users can upgrade to ingress-nginx versions 1.13.7, 1.14.3, or any later version to address this vulnerability. For upgrade instructions, refer to the 'Upgrading Ingress-nginx' documentation.