CVEvulnerability
CVE-2021-25736
6.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2023-10-30
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.8 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:N/A:N
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N
- Weaknesses
- CWE-114
Description
Kube-proxy
on Windows can unintentionally forward traffic to local processes
listening on the same port (“spec.ports[*].port”) as a LoadBalancer
Service when the LoadBalancer controller
does not set the “status.loadBalancer.ingress[].ip” field. Clusters
where the LoadBalancer controller sets the
“status.loadBalancer.ingress[].ip” field are unaffected.
Affected configurations
• kubernetes kubernetes (>= 1.18.0 < 1.18.18)
• kubernetes kubernetes (>= 1.19.0 < 1.19.10)
• kubernetes kubernetes (>= 1.20.0 < 1.20.6)
Related
Weakness · CWE (1)
- CWE-114 Process Control weakness
References
- https://github.com/kubernetes/kubernetes/pull/99958 Third Party Advisory
- https://groups.google.com/g/kubernetes-security-announce/c/lIoOPObO51Q/m/O15LOazPAgAJ Mailing List, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20231221-0003/ security.netapp.com
- https://github.com/kubernetes/kubernetes/pull/99958 Third Party Advisory
- https://groups.google.com/g/kubernetes-security-announce/c/lIoOPObO51Q/m/O15LOazPAgAJ Mailing List, Third Party Advisory
- https://security.netapp.com/advisory/ntap-20231221-0003/ security.netapp.com