GitHub Advisoryadvisory · Go

GHSA-57v4-m9jx-mh8r Improper Input Validation

MEDIUM Published 2021-06-08 Modified 2023-02-13 Official page ↗
Aliases
CVE-2021-3499
Ecosystem
Go
Packages
github.com/ovn-org/ovn-kubernetes
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Weaknesses
CWE-863
Reviewed
2021-05-28

Affected packages

• Go github.com/ovn-org/ovn-kubernetes: <= 0.3.0 (no fix yet)

Description

A vulnerability was found in OVN Kubernetes in versions up to and including 0.3.0 where the Egress Firewall does not reliably apply firewall rules when there is multiple DNS rules. It could lead to potentially lose of confidentiality, integrity or availability of a service

Related

Alias · CVE (1)

  • CVE-2021-3499 A vulnerability was found in OVN Kubernetes in versions up to and including 0.3.0 where the Egress Firewall does not reliably apply… vulnerability

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References