cve.bz

CVE-2021-25737

4.8 mediumEPSS 1.3%

Medium (4.8) in kubernetes kubernetes. EPSS 1.3% chance of exploitation in the next 30 days. Fixed in k8s.io/kubernetes 1.18.19, 1.19.11, 1.20.7.

A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.

Severity

CVSS 3.1

4.8 medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS
1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWEs
CWE-601, CWE-184
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-mfv7-gq43-w965Gok8s.io/kubernetes>=1.16.0 <1.18.191.18.19
GHSA-mfv7-gq43-w965Gok8s.io/kubernetes>=1.19.0 <1.19.111.19.11
GHSA-mfv7-gq43-w965Gok8s.io/kubernetes>=1.20.0 <1.20.71.20.7
GHSA-mfv7-gq43-w965Gok8s.io/kubernetes>=1.21.0 <1.21.11.21.1
GO-2022-0908Gok8s.io/kubernetes>=1.16.0 <1.18.19
>=1.19.0 <1.19.11
>=1.20.0 <1.20.7
>=1.21.0 <1.21.1		1.18.19, 1.19.11, 1.20.7, 1.21.1

References

Check your stackJSON