VULNERABILITY INTELLIGENCE

CVE-2021-25737

CVSS score2.7 LOW

EPSS probability1.33%

CISA KEVNot currently listed

Published2021-09-06

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Description

A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.

Weakness classification

jordan@liggitt.net: CWE-184
nvd@nist.gov: CWE-601

Primary references

jordan@liggitt.net — Patch, Third Party Advisory
jordan@liggitt.net — Mailing List, Third Party Advisory
jordan@liggitt.net — Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory