CVE-2021-3499

2021-06-0215:48:10

CWE-863

redhat

www.cve.org

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.6%

JSON

A vulnerability was found in OVN Kubernetes in versions up to and including 0.3.0 where the Egress Firewall does not reliably apply firewall rules when there is multiple DNS rules. It could lead to potentially lose of confidentiality, integrity or availability of a service.

CNA Affected

[
  {
    "product": "openshift/ovn-kubernetes",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "All ovn-kubernetes versions up to and including 0.3.0"
      }
    ]
  }
]

References

bugzilla.redhat.com/show_bug.cgi?id=1949188