Holes in EndpointSlice Validation Enable Host Network Hijack

🗓️ 18 May 2021 19:14:27Reported by Kubernetes Security Response CommitteeType

Kubernetes EndpointSlice validation flaw may hijack host network to private ranges; fixed in newer versions.

Reporter	Title	Published	Views	Family All 44
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	8 Jun 202321:56	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a Kubernetes API server security vulnerability (CVE-2021-25737)	28 May 202116:54	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® Db2® On Openshift and IBM® Db2® and Db2 Warehouse® on Cloud Pak for Data	29 Jun 202217:05	–	ibm
IBM Security Bulletins	Security Bulletin: Security Vulnerabilities affect IBM Cloud Private - Kubernetes (CVE-2021-25737)	22 Apr 202213:12	–	ibm
IBM Security Bulletins	Security Bulletin: Red Hat OpenShift on IBM Cloud is affected by a Kubernetes API server security vulnerability (CVE-2021-25737)	18 Nov 202109:39	–	ibm
ArchLinux	[ASA-202106-29] kube-apiserver: insufficient validation	9 Jun 202100:00	–	archlinux
BDU FSTEC	The vulnerability of the Kubernetes cluster management software, related to the use of open redirection, allows a hacker to access confidential data and compromise its integrity.	14 Apr 202200:00	–	bdu_fstec
Circl	CVE-2021-25737	15 Jul 202107:58	–	circl
CNNVD	Kubernetes 输入验证错误漏洞	18 May 202100:00	–	cnnvd
CVE	CVE-2021-25737	6 Sep 202111:32	–	cve