-
CVSS Score
-The vulnerability stems from missing timeout handling in cron job execution. The fix (GitHub PR #4764) added 'timeout' commands to cron_runjobs.sh, confirming the absence of timeout mechanisms was the root cause. The script's job execution logic (likely line 72 referenced in Red Hat Bugzilla) ran user cron jobs without time limits, enabling DoS via resource exhaustion. High confidence comes from direct correlation between vulnerability description, fix implementation, and references to cron_runjobs.sh in associated bug reports.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| openshift-origin-node | rubygems | <= 1.3.3 |