VULNERABILITY INTELLIGENCE

CVE-2021-3499

CVSS score5.6 MEDIUM
EPSS probability0.80%
CISA KEVNot currently listed
Published2021-06-02
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Description

A vulnerability was found in OVN Kubernetes in versions up to and including 0.3.0 where the Egress Firewall does not reliably apply firewall rules when there is multiple DNS rules. It could lead to potentially lose of confidentiality, integrity or availability of a service.

Weakness classification

  • secalert@redhat.com: CWE-863
  • nvd@nist.gov: CWE-863

Primary references