CVE-2021-25735
Validating Admission Webhook does not observe some previous fields
A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
6.5
Validating Admission Webhook does not observe some previous fields
A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.
- Record
CVE-2021-25735- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H - Weakness
- CWE-372
- Updated
- 2026-11-02
EUVDEUVD-2021-1071
6.5
A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.
- Record
EUVD-2021-1071- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-g42g-737j-qx6j
6.5
Access Restriction Bypass in kube-apiserver
A vulnerability in Kubernetes kube-apiserver could allow node updates to bypass a Validating Admission Webhook and allow unauthorized node updates. The information that is provided to the admission controller could contain old configurations that overwrite values used for validation. Since the overwriting takes place before the validation, this could lead the admission controller to accept requests that should be blocked. The vulnerability can be exploited when an update action on node resources is performed and an admission controller is in place and configured to validate the action.
Users are only affected by this vulnerability if they are running a Validating Admission Webhook for Nodes that denies admission based partially on the old state of the Node object. It only impacts validating admission plugins that rely on old values in certain fields and does not impact calls from kubelets that go through the built-in NodeRestriction admission plugin.
- Record
GHSA-g42g-737j-qx6j- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H - Weakness
- CWE-284, CWE-372, CWE-863
- Updated
- 2026-11-02
NVD
6.5
A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.
- Record
CVE-2021-25735- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H - CVSS 2.0
- 5.5 Medium
AV:N/AC:L/Au:S/C:N/I:P/A:P - Weakness
- CWE-372
- Updated
- 2026-11-02
OSVALPINE-CVE-2021-25735
6.5
A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.
- Record
ALPINE-CVE-2021-25735- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H - Updated
- 2026-11-03
OSV
6.5
A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.
- Record
CVE-2021-25735- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
Show 7 moreShow less
OSVDEBIAN-CVE-2021-25735
6.5
A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.
- Record
DEBIAN-CVE-2021-25735- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
OSVGHSA-g42g-737j-qx6j
6.5
Access Restriction Bypass in kube-apiserver
A vulnerability in Kubernetes kube-apiserver could allow node updates to bypass a Validating Admission Webhook and allow unauthorized node updates. The information that is provided to the admission controller could contain old configurations that overwrite values used for validation. Since the overwriting takes place before the validation, this could lead the admission controller to accept requests that should be blocked. The vulnerability can be exploited when an update action on node resources is performed and an admission controller is in place and configured to validate the action.
Users are only affected by this vulnerability if they are running a Validating Admission Webhook for Nodes that denies admission based partially on the old state of the Node object. It only impacts validating admission plugins that rely on old values in certain fields and does not impact calls from kubelets that go through the built-in NodeRestriction admission plugin.
- Record
GHSA-g42g-737j-qx6j- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H - Weakness
- CWE-284, CWE-372, CWE-863
- Updated
- 2026-11-02
OSVOESA-2021-1373
6.5
kubernetes security update
Container cluster management.
Security Fix(es):
A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.(CVE-2021-25737)
A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.(CVE-2021-25735)
- Record
OESA-2021-1373- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
OSVRHSA-2021:2437
8.6
Red Hat Security Advisory: OpenShift Container Platform 4.8.2 packages and security update
- Record
RHSA-2021:2437- CVSS 3.1
- 8.6 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2021-25735
6.5
A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.
- Record
UBUNTU-CVE-2021-25735- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H - Updated
- 2026-11-02
OSVGO-2022-0907 No score
Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes
Access Restriction Bypass in kube-apiserver in k8s.io/kubernetes
- Record
GO-2022-0907- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:15424-1 No score
govulncheck-vulndb-0.0.20250807T150727-1.1 on GA media
These are all security issues fixed in the govulncheck-vulndb-0.0.20250807T150727-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:15424-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
k8s.io/kubernetesGo |
1.20.0 to 1.20.5 | 1.20.6 |
k8s.io/kubernetesGo |
1.19.0 to 1.19.9 | 1.19.10 |
k8s.io/kubernetesGo |
through 1.18.17 | 1.18.18 |
k3sAlpine:v3.14 |
before 1.20.6.1-r0 | 1.20.6.1-r0 |
k3sAlpine:v3.15 |
before 1.20.6.1-r0 | 1.20.6.1-r0 |
k3sAlpine:v3.16 |
before 1.20.6.1-r0 | 1.20.6.1-r0 |
k3sAlpine:v3.17 |
before 1.20.6.1-r0 | 1.20.6.1-r0 |
k3sAlpine:v3.18 |
before 1.20.6.1-r0 | 1.20.6.1-r0 |
k3sAlpine:v3.19 |
before 1.20.6.1-r0 | 1.20.6.1-r0 |
k3sAlpine:v3.20 |
before 1.20.6.1-r0 | 1.20.6.1-r0 |
Show 194 moreShow less
| Package | Affected | Fixed |
|---|---|---|
k3sAlpine:v3.21 |
before 1.20.6.1-r0 | 1.20.6.1-r0 |
k3sAlpine:v3.22 |
before 1.20.6.1-r0 | 1.20.6.1-r0 |
k3sAlpine:v3.23 |
before 1.20.6.1-r0 | 1.20.6.1-r0 |
k3sAlpine:v3.24 |
before 1.20.6.1-r0 | 1.20.6.1-r0 |
kubernetesDebian:12 |
before 1.20.5+really1.20.2-1 | 1.20.5+really1.20.2-1 |
kubernetesDebian:13 |
before 1.20.5+really1.20.2-1 | 1.20.5+really1.20.2-1 |
kubernetesDebian:14 |
before 1.20.5+really1.20.2-1 | 1.20.5+really1.20.2-1 |
k8s.io/kubernetesGo |
1.20.0 up to 1.20.6 | 1.20.6 |
k8s.io/kubernetesGo |
1.19.0 up to 1.19.10 | 1.19.10 |
k8s.io/kubernetesGo |
before 1.18.18 | 1.18.18 |
k8s.io/kubernetesGo |
before 1.18.18, 1.19.0 up to 1.19.10, 1.20.0 up to 1.20.6 | 1.18.181.19.101.20.6 |
kubernetesopenEuler:20.03-LTS-SP1 From an advisory covering 2 CVEs |
before 1.20.2-5.oe1 | 1.20.2-5.oe1 |
kubernetesopenEuler:20.03-LTS-SP2 From an advisory covering 2 CVEs |
before 1.20.2-5.oe1 | 1.20.2-5.oe1 |
ignitionRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.9.0-6.rhaos4.8.el8 | 0:2.9.0-6.rhaos4.8.el8 |
ignition-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.9.0-6.rhaos4.8.el8 | 0:2.9.0-6.rhaos4.8.el8 |
ignition-debugsourceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.9.0-6.rhaos4.8.el8 | 0:2.9.0-6.rhaos4.8.el8 |
ignition-validateRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.9.0-6.rhaos4.8.el8 | 0:2.9.0-6.rhaos4.8.el8 |
ignition-validate-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.9.0-6.rhaos4.8.el8 | 0:2.9.0-6.rhaos4.8.el8 |
openshiftRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7 | 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7 |
openshift-clientsRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7 | 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7 |
openshift-clients-redistributableRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7 | 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7 |
openshift-hyperkubeRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7 | 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7 |
openshiftRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8 | 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8 |
openshift-clientsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8 | 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8 |
openshift-clients-redistributableRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8 | 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8 |
openshift-hyperkubeRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8 | 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8 |
cri-oRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:1.21.2-5.rhaos4.8.gitb27d974.el7 | 0:1.21.2-5.rhaos4.8.gitb27d974.el7 |
cri-o-debuginfoRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:1.21.2-5.rhaos4.8.gitb27d974.el7 | 0:1.21.2-5.rhaos4.8.gitb27d974.el7 |
cri-toolsRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:1.21.0-2.el7 | 0:1.21.0-2.el7 |
cri-tools-debuginfoRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:1.21.0-2.el7 | 0:1.21.0-2.el7 |
haproxyRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:2.2.13-1.el7 | 0:2.2.13-1.el7 |
haproxy-debuginfoRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:2.2.13-1.el7 | 0:2.2.13-1.el7 |
openshift-ansibleRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7 | 0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7 |
openshift-ansible-testRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7 | 0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7 |
runcRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:1.0.0-98.rhaos4.8.gitcd80260.el7 | 0:1.0.0-98.rhaos4.8.gitcd80260.el7 |
runc-debuginfoRed Hat:openshift:4.8::el7 From an advisory covering 26 CVEs |
before 0:1.0.0-98.rhaos4.8.gitcd80260.el7 | 0:1.0.0-98.rhaos4.8.gitcd80260.el7 |
afterburnRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:5.0.0-1.rhaos4.8.el8 | 0:5.0.0-1.rhaos4.8.el8 |
afterburn-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:5.0.0-1.rhaos4.8.el8 | 0:5.0.0-1.rhaos4.8.el8 |
atomic-openshift-service-idlerRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-202106281541.p0.git.39cfc66.assembly.stream.el8 | 0:4.8.0-202106281541.p0.git.39cfc66.assembly.stream.el8 |
butaneRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.12.1-1.rhaos4.8.el8 | 0:0.12.1-1.rhaos4.8.el8 |
butane-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.12.1-1.rhaos4.8.el8 | 0:0.12.1-1.rhaos4.8.el8 |
console-login-helper-messagesRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.20.3-1.rhaos4.8.el8 | 0:0.20.3-1.rhaos4.8.el8 |
console-login-helper-messages-issuegenRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.20.3-1.rhaos4.8.el8 | 0:0.20.3-1.rhaos4.8.el8 |
console-login-helper-messages-profileRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.20.3-1.rhaos4.8.el8 | 0:0.20.3-1.rhaos4.8.el8 |
coreos-installerRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.9.0-6.rhaos4.8.el8 | 0:0.9.0-6.rhaos4.8.el8 |
coreos-installer-bootinfraRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.9.0-6.rhaos4.8.el8 | 0:0.9.0-6.rhaos4.8.el8 |
coreos-installer-bootinfra-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.9.0-6.rhaos4.8.el8 | 0:0.9.0-6.rhaos4.8.el8 |
coreos-installer-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.9.0-6.rhaos4.8.el8 | 0:0.9.0-6.rhaos4.8.el8 |
coreos-installer-debugsourceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.9.0-6.rhaos4.8.el8 | 0:0.9.0-6.rhaos4.8.el8 |
cri-oRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.21.2-5.rhaos4.8.gitb27d974.el8 | 0:1.21.2-5.rhaos4.8.gitb27d974.el8 |
cri-o-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.21.2-5.rhaos4.8.gitb27d974.el8 | 0:1.21.2-5.rhaos4.8.gitb27d974.el8 |
cri-o-debugsourceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.21.2-5.rhaos4.8.gitb27d974.el8 | 0:1.21.2-5.rhaos4.8.gitb27d974.el8 |
cri-toolsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.21.0-2.el8 | 0:1.21.0-2.el8 |
cri-tools-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.21.0-2.el8 | 0:1.21.0-2.el8 |
cri-tools-debugsourceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.21.0-2.el8 | 0:1.21.0-2.el8 |
haproxyRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.2.13-1.el8 | 0:2.2.13-1.el8 |
haproxy-debugsourceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.2.13-1.el8 | 0:2.2.13-1.el8 |
ironic-imagesRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2021.1-20210614.1.el8 | 0:2021.1-20210614.1.el8 |
ironic-images-allRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2021.1-20210614.1.el8 | 0:2021.1-20210614.1.el8 |
ironic-images-ipa-ppc64leRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2021.1-20210614.1.el8 | 0:2021.1-20210614.1.el8 |
ironic-images-ipa-x86_64Red Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2021.1-20210614.1.el8 | 0:2021.1-20210614.1.el8 |
jenkinsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.289.1.1624020353-1.el8 | 0:2.289.1.1624020353-1.el8 |
jenkins-2-pluginsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.1624022417-1.el8 | 0:4.8.1624022417-1.el8 |
kata-containersRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.1.0-4.el8 | 0:2.1.0-4.el8 |
openshift-kuryrRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 | 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 |
openshift-kuryr-cniRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 | 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 |
openshift-kuryr-commonRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 | 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 |
openshift-kuryr-controllerRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 | 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 |
openstack-ironicRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 1:17.0.4-0.20210713221218.a415e7e.el8 | 1:17.0.4-0.20210713221218.a415e7e.el8 |
openstack-ironic-apiRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 1:17.0.4-0.20210713221218.a415e7e.el8 | 1:17.0.4-0.20210713221218.a415e7e.el8 |
openstack-ironic-commonRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 1:17.0.4-0.20210713221218.a415e7e.el8 | 1:17.0.4-0.20210713221218.a415e7e.el8 |
openstack-ironic-conductorRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 1:17.0.4-0.20210713221218.a415e7e.el8 | 1:17.0.4-0.20210713221218.a415e7e.el8 |
openstack-ironic-inspectorRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:10.6.1-0.20210406091336.579f59c.el8 | 0:10.6.1-0.20210406091336.579f59c.el8 |
openstack-ironic-inspector-apiRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:10.6.1-0.20210406091336.579f59c.el8 | 0:10.6.1-0.20210406091336.579f59c.el8 |
openstack-ironic-inspector-conductorRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:10.6.1-0.20210406091336.579f59c.el8 | 0:10.6.1-0.20210406091336.579f59c.el8 |
openstack-ironic-inspector-dnsmasqRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:10.6.1-0.20210406091336.579f59c.el8 | 0:10.6.1-0.20210406091336.579f59c.el8 |
openstack-ironic-python-agentRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:7.0.2-0.20210611153100.bfa97cb.el8 | 0:7.0.2-0.20210611153100.bfa97cb.el8 |
openvswitch2.15Red Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.15.0-9.el8fdp | 0:2.15.0-9.el8fdp |
openvswitch2.15-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.15.0-9.el8fdp | 0:2.15.0-9.el8fdp |
openvswitch2.15-develRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.15.0-9.el8fdp | 0:2.15.0-9.el8fdp |
openvswitch2.15-ipsecRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.15.0-9.el8fdp | 0:2.15.0-9.el8fdp |
ostreeRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2020.7-5.el8_4 | 0:2020.7-5.el8_4 |
ostree-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2020.7-5.el8_4 | 0:2020.7-5.el8_4 |
ostree-debugsourceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2020.7-5.el8_4 | 0:2020.7-5.el8_4 |
ostree-develRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2020.7-5.el8_4 | 0:2020.7-5.el8_4 |
ostree-grub2Red Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2020.7-5.el8_4 | 0:2020.7-5.el8_4 |
ostree-libsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2020.7-5.el8_4 | 0:2020.7-5.el8_4 |
ostree-libs-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2020.7-5.el8_4 | 0:2020.7-5.el8_4 |
ovn2.13Red Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:20.12.0-25.el8fdp | 0:20.12.0-25.el8fdp |
ovn2.13-centralRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:20.12.0-25.el8fdp | 0:20.12.0-25.el8fdp |
ovn2.13-central-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:20.12.0-25.el8fdp | 0:20.12.0-25.el8fdp |
ovn2.13-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:20.12.0-25.el8fdp | 0:20.12.0-25.el8fdp |
ovn2.13-debugsourceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:20.12.0-25.el8fdp | 0:20.12.0-25.el8fdp |
ovn2.13-hostRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:20.12.0-25.el8fdp | 0:20.12.0-25.el8fdp |
ovn2.13-host-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:20.12.0-25.el8fdp | 0:20.12.0-25.el8fdp |
ovn2.13-vtepRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:20.12.0-25.el8fdp | 0:20.12.0-25.el8fdp |
ovn2.13-vtep-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:20.12.0-25.el8fdp | 0:20.12.0-25.el8fdp |
podmanRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.0.1-6.el8 | 0:3.0.1-6.el8 |
podman-catatonit-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.0.1-6.el8 | 0:3.0.1-6.el8 |
podman-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.0.1-6.el8 | 0:3.0.1-6.el8 |
podman-debugsourceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.0.1-6.el8 | 0:3.0.1-6.el8 |
podman-dockerRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.0.1-6.el8 | 0:3.0.1-6.el8 |
podman-plugins-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.0.1-6.el8 | 0:3.0.1-6.el8 |
podman-remoteRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.0.1-6.el8 | 0:3.0.1-6.el8 |
podman-remote-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.0.1-6.el8 | 0:3.0.1-6.el8 |
podman-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.0.1-6.el8 | 0:3.0.1-6.el8 |
python-debtcollectorRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.2.0-0.20210324220630.649189d.el8 | 0:2.2.0-0.20210324220630.649189d.el8 |
python-eventletRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.25.2-4.el8 | 0:0.25.2-4.el8 |
python-hardwareRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.27.0-0.20210406121246.756fedb.el8 | 0:0.27.0-0.20210406121246.756fedb.el8 |
python-ironic-libRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.6.2-0.20210608101214.ca2e4ba.el8 | 0:4.6.2-0.20210608101214.ca2e4ba.el8 |
python-ironic-prometheus-exporterRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.2.1-0.20210325143713.70e39c8.el8 | 0:2.2.1-0.20210325143713.70e39c8.el8 |
python-jsonschemaRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.2.0-5.el8ost | 0:3.2.0-5.el8ost |
python-keystoneauth1Red Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.3.0-0.20210325001456.6a66271.el8 | 0:4.3.0-0.20210325001456.6a66271.el8 |
python-kubernetesRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:12.0.1-1.el8 | 0:12.0.1-1.el8 |
python-openshiftRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 1:0.12.1-1.el8 | 1:0.12.1-1.el8 |
python-openstacksdkRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.53.0-0.20210325011601.4629245.el8 | 0:0.53.0-0.20210325011601.4629245.el8 |
python-oslo-concurrencyRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.4.0-0.20210325004915.7dcf9e9.el8 | 0:4.4.0-0.20210325004915.7dcf9e9.el8 |
python-oslo-concurrency-langRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.4.0-0.20210325004915.7dcf9e9.el8 | 0:4.4.0-0.20210325004915.7dcf9e9.el8 |
python-oslo-configRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 2:8.5.0-0.20210325050501.cfa2564.el8 | 2:8.5.0-0.20210325050501.cfa2564.el8 |
python-oslo-contextRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.2.0-0.20210325043103.0d02866.el8 | 0:3.2.0-0.20210325043103.0d02866.el8 |
python-oslo-dbRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:8.5.0-0.20210325041241.503db60.el8 | 0:8.5.0-0.20210325041241.503db60.el8 |
python-oslo-db-langRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:8.5.0-0.20210325041241.503db60.el8 | 0:8.5.0-0.20210325041241.503db60.el8 |
python-oslo-i18nRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:5.0.1-0.20210324221600.73187bd.el8 | 0:5.0.1-0.20210324221600.73187bd.el8 |
python-oslo-i18n-langRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:5.0.1-0.20210324221600.73187bd.el8 | 0:5.0.1-0.20210324221600.73187bd.el8 |
python-oslo-logRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.4.0-0.20210409081224.9b29c90.el8 | 0:4.4.0-0.20210409081224.9b29c90.el8 |
python-oslo-log-langRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.4.0-0.20210409081224.9b29c90.el8 | 0:4.4.0-0.20210409081224.9b29c90.el8 |
python-oslo-policyRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.7.0-0.20210325051823.d853485.el8 | 0:3.7.0-0.20210325051823.d853485.el8 |
python-oslo-policy-langRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.7.0-0.20210325051823.d853485.el8 | 0:3.7.0-0.20210325051823.d853485.el8 |
python-oslo-serializationRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.1.0-0.20210325012242.8445e61.el8 | 0:4.1.0-0.20210325012242.8445e61.el8 |
python-oslo-serviceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.5.0-0.20210325014731.d25e454.el8 | 0:2.5.0-0.20210325014731.d25e454.el8 |
python-oslo-upgradecheckRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.3.0-0.20210325003851.9f95a6e.el8 | 0:1.3.0-0.20210325003851.9f95a6e.el8 |
python-oslo-utilsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-0.20210325043201.3288539.el8 | 0:4.8.0-0.20210325043201.3288539.el8 |
python-oslo-utils-langRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-0.20210325043201.3288539.el8 | 0:4.8.0-0.20210325043201.3288539.el8 |
python-pyrsistentRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.16.0-3.el8ost | 0:0.16.0-3.el8ost |
python-stevedoreRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.3.0-0.20210325001012.7d7154f.el8 | 0:3.3.0-0.20210325001012.7d7154f.el8 |
python-sushyRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.7.1-0.20210428165244.bc49878.el8 | 0:3.7.1-0.20210428165244.bc49878.el8 |
python-sushy-oem-idracRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.0.1-0.20210326152858.83b7eb0.el8 | 0:2.0.1-0.20210326152858.83b7eb0.el8 |
python-toozRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.8.0-0.20210324235001.54448e9.el8 | 0:2.8.0-0.20210324235001.54448e9.el8 |
python3-debtcollectorRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.2.0-0.20210324220630.649189d.el8 | 0:2.2.0-0.20210324220630.649189d.el8 |
python3-eventletRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.25.2-4.el8 | 0:0.25.2-4.el8 |
python3-hardwareRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.27.0-0.20210406121246.756fedb.el8 | 0:0.27.0-0.20210406121246.756fedb.el8 |
python3-hardware-detectRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.27.0-0.20210406121246.756fedb.el8 | 0:0.27.0-0.20210406121246.756fedb.el8 |
python3-ironic-inspector-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:10.6.1-0.20210406091336.579f59c.el8 | 0:10.6.1-0.20210406091336.579f59c.el8 |
python3-ironic-libRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.6.2-0.20210608101214.ca2e4ba.el8 | 0:4.6.2-0.20210608101214.ca2e4ba.el8 |
python3-ironic-prometheus-exporterRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.2.1-0.20210325143713.70e39c8.el8 | 0:2.2.1-0.20210325143713.70e39c8.el8 |
python3-ironic-python-agentRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:7.0.2-0.20210611153100.bfa97cb.el8 | 0:7.0.2-0.20210611153100.bfa97cb.el8 |
python3-ironic-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 1:17.0.4-0.20210713221218.a415e7e.el8 | 1:17.0.4-0.20210713221218.a415e7e.el8 |
python3-jsonschemaRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.2.0-5.el8ost | 0:3.2.0-5.el8ost |
python3-keystoneauth1Red Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.3.0-0.20210325001456.6a66271.el8 | 0:4.3.0-0.20210325001456.6a66271.el8 |
python3-kubernetesRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:12.0.1-1.el8 | 0:12.0.1-1.el8 |
python3-kubernetes-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:12.0.1-1.el8 | 0:12.0.1-1.el8 |
python3-kuryr-kubernetesRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 | 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8 |
python3-openshiftRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 1:0.12.1-1.el8 | 1:0.12.1-1.el8 |
python3-openstacksdkRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.53.0-0.20210325011601.4629245.el8 | 0:0.53.0-0.20210325011601.4629245.el8 |
python3-openstacksdk-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.53.0-0.20210325011601.4629245.el8 | 0:0.53.0-0.20210325011601.4629245.el8 |
python3-openvswitch2.15Red Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.15.0-9.el8fdp | 0:2.15.0-9.el8fdp |
python3-openvswitch2.15-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.15.0-9.el8fdp | 0:2.15.0-9.el8fdp |
python3-oslo-concurrencyRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.4.0-0.20210325004915.7dcf9e9.el8 | 0:4.4.0-0.20210325004915.7dcf9e9.el8 |
python3-oslo-concurrency-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.4.0-0.20210325004915.7dcf9e9.el8 | 0:4.4.0-0.20210325004915.7dcf9e9.el8 |
python3-oslo-configRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 2:8.5.0-0.20210325050501.cfa2564.el8 | 2:8.5.0-0.20210325050501.cfa2564.el8 |
python3-oslo-contextRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.2.0-0.20210325043103.0d02866.el8 | 0:3.2.0-0.20210325043103.0d02866.el8 |
python3-oslo-dbRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:8.5.0-0.20210325041241.503db60.el8 | 0:8.5.0-0.20210325041241.503db60.el8 |
python3-oslo-db-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:8.5.0-0.20210325041241.503db60.el8 | 0:8.5.0-0.20210325041241.503db60.el8 |
python3-oslo-i18nRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:5.0.1-0.20210324221600.73187bd.el8 | 0:5.0.1-0.20210324221600.73187bd.el8 |
python3-oslo-logRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.4.0-0.20210409081224.9b29c90.el8 | 0:4.4.0-0.20210409081224.9b29c90.el8 |
python3-oslo-log-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.4.0-0.20210409081224.9b29c90.el8 | 0:4.4.0-0.20210409081224.9b29c90.el8 |
python3-oslo-policyRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.7.0-0.20210325051823.d853485.el8 | 0:3.7.0-0.20210325051823.d853485.el8 |
python3-oslo-serializationRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.1.0-0.20210325012242.8445e61.el8 | 0:4.1.0-0.20210325012242.8445e61.el8 |
python3-oslo-serialization-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.1.0-0.20210325012242.8445e61.el8 | 0:4.1.0-0.20210325012242.8445e61.el8 |
python3-oslo-serviceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.5.0-0.20210325014731.d25e454.el8 | 0:2.5.0-0.20210325014731.d25e454.el8 |
python3-oslo-service-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.5.0-0.20210325014731.d25e454.el8 | 0:2.5.0-0.20210325014731.d25e454.el8 |
python3-oslo-upgradecheckRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.3.0-0.20210325003851.9f95a6e.el8 | 0:1.3.0-0.20210325003851.9f95a6e.el8 |
python3-oslo-utilsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-0.20210325043201.3288539.el8 | 0:4.8.0-0.20210325043201.3288539.el8 |
python3-oslo-utils-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:4.8.0-0.20210325043201.3288539.el8 | 0:4.8.0-0.20210325043201.3288539.el8 |
python3-pyrsistentRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.16.0-3.el8ost | 0:0.16.0-3.el8ost |
python3-pyrsistent-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.16.0-3.el8ost | 0:0.16.0-3.el8ost |
python3-stevedoreRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.3.0-0.20210325001012.7d7154f.el8 | 0:3.3.0-0.20210325001012.7d7154f.el8 |
python3-sushyRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.7.1-0.20210428165244.bc49878.el8 | 0:3.7.1-0.20210428165244.bc49878.el8 |
python3-sushy-oem-idracRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.0.1-0.20210326152858.83b7eb0.el8 | 0:2.0.1-0.20210326152858.83b7eb0.el8 |
python3-sushy-oem-idrac-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.0.1-0.20210326152858.83b7eb0.el8 | 0:2.0.1-0.20210326152858.83b7eb0.el8 |
python3-sushy-testsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:3.7.1-0.20210428165244.bc49878.el8 | 0:3.7.1-0.20210428165244.bc49878.el8 |
python3-toozRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:2.8.0-0.20210324235001.54448e9.el8 | 0:2.8.0-0.20210324235001.54448e9.el8 |
redhat-release-coreosRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:48.84-4.el8 | 0:48.84-4.el8 |
rteval-loadsRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.4-12.el8 | 0:1.4-12.el8 |
rteval-loads-debugsourceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.4-12.el8 | 0:1.4-12.el8 |
runcRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.0.0-98.rhaos4.8.gitcd80260.el8 | 0:1.0.0-98.rhaos4.8.gitcd80260.el8 |
runc-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.0.0-98.rhaos4.8.gitcd80260.el8 | 0:1.0.0-98.rhaos4.8.gitcd80260.el8 |
runc-debugsourceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:1.0.0-98.rhaos4.8.gitcd80260.el8 | 0:1.0.0-98.rhaos4.8.gitcd80260.el8 |
rust-afterburnRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:5.0.0-1.rhaos4.8.el8 | 0:5.0.0-1.rhaos4.8.el8 |
rust-afterburn-debugsourceRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:5.0.0-1.rhaos4.8.el8 | 0:5.0.0-1.rhaos4.8.el8 |
stress-ngRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.12.06-1.el8 | 0:0.12.06-1.el8 |
stress-ng-debuginfoRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.12.06-1.el8 | 0:0.12.06-1.el8 |
toolboxRed Hat:openshift:4.8::el8 From an advisory covering 26 CVEs |
before 0:0.0.8-3.rhaos4.8.el8 | 0:0.0.8-3.rhaos4.8.el8 |
govulncheck-vulndbopenSUSE:Tumbleweed From an advisory covering 44 CVEs |
before 0.0.20250807T150727-1.1 | 0.0.20250807T150727-1.1 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | darryk10/CVE-2021-25735 | 2021-04-22 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| affected, aliases, references | OSV | |
| affected | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-25735 is a medium vulnerability (CVSS 6.5) in Kubernetes, published May 28, 2021. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.38%, the 92nd percentile. Fixed in k8s.io/kubernetes 1.20.6.
References
groups.google.com/g/kubernetes-security-announce/c/FKAGqT4jx9Y
github.com/kubernetes/kubernetes/issues/100096
nvd.nist.gov/vuln/detail/CVE-2021-25735
github.com/kubernetes/kubernetes/pull/99946
github.com/kubernetes/kubernetes/commit/00e81db174ef7aca497be5f42d87e46d14df2a90
bugzilla.redhat.com/show_bug.cgi?id=1937562
Show 167 moreShow less
pkg.go.dev/k8s.io/[email protected]/cmd/kube-apiserver
sysdig.com/blog/cve-2021-25735-kubernetes-admission-bypass
github.com/advisories/GHSA-g42g-737j-qx6j
security.alpinelinux.org/vuln/CVE-2021-25735
security-tracker.debian.org/tracker/CVE-2021-25735
github.com/kubernetes/kubernetes
openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2021-1373
nvd.nist.gov/vuln/detail/CVE-2021-25737
access.redhat.com/errata/RHSA-2021:2437
access.redhat.com/security/updates/classification
bugzilla.redhat.com/show_bug.cgi?id=1918750
bugzilla.redhat.com/show_bug.cgi?id=1921650
bugzilla.redhat.com/show_bug.cgi?id=1940489
bugzilla.redhat.com/show_bug.cgi?id=1947102
bugzilla.redhat.com/show_bug.cgi?id=1947105
bugzilla.redhat.com/show_bug.cgi?id=1954917
bugzilla.redhat.com/show_bug.cgi?id=1958407
bugzilla.redhat.com/show_bug.cgi?id=1959545
bugzilla.redhat.com/show_bug.cgi?id=1978621
security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2437.json
access.redhat.com/security/cve/CVE-2021-3114
cve.org/CVERecord?id=CVE-2021-3114
nvd.nist.gov/vuln/detail/CVE-2021-3114
groups.google.com/g/golang-announce/c/mperVMGa98w
access.redhat.com/security/cve/CVE-2021-3121
cve.org/CVERecord?id=CVE-2021-3121
nvd.nist.gov/vuln/detail/CVE-2021-3121
access.redhat.com/security/cve/CVE-2021-3636
cve.org/CVERecord?id=CVE-2021-3636
nvd.nist.gov/vuln/detail/CVE-2021-3636
access.redhat.com/security/cve/CVE-2021-20291
bugzilla.redhat.com/show_bug.cgi?id=1939485
cve.org/CVERecord?id=CVE-2021-20291
nvd.nist.gov/vuln/detail/CVE-2021-20291
unit42.paloaltonetworks.com/cve-2021-20291
access.redhat.com/security/cve/CVE-2021-21419
cve.org/CVERecord?id=CVE-2021-21419
nvd.nist.gov/vuln/detail/CVE-2021-21419
access.redhat.com/security/cve/CVE-2021-21602
bugzilla.redhat.com/show_bug.cgi?id=1925161
cve.org/CVERecord?id=CVE-2021-21602
nvd.nist.gov/vuln/detail/CVE-2021-21602
access.redhat.com/security/cve/CVE-2021-21603
bugzilla.redhat.com/show_bug.cgi?id=1925160
cve.org/CVERecord?id=CVE-2021-21603
nvd.nist.gov/vuln/detail/CVE-2021-21603
access.redhat.com/security/cve/CVE-2021-21604
bugzilla.redhat.com/show_bug.cgi?id=1925157
cve.org/CVERecord?id=CVE-2021-21604
nvd.nist.gov/vuln/detail/CVE-2021-21604
access.redhat.com/security/cve/CVE-2021-21605
bugzilla.redhat.com/show_bug.cgi?id=1925143
cve.org/CVERecord?id=CVE-2021-21605
nvd.nist.gov/vuln/detail/CVE-2021-21605
access.redhat.com/security/cve/CVE-2021-21606
bugzilla.redhat.com/show_bug.cgi?id=1925159
cve.org/CVERecord?id=CVE-2021-21606
nvd.nist.gov/vuln/detail/CVE-2021-21606
access.redhat.com/security/cve/CVE-2021-21607
bugzilla.redhat.com/show_bug.cgi?id=1925156
cve.org/CVERecord?id=CVE-2021-21607
nvd.nist.gov/vuln/detail/CVE-2021-21607
access.redhat.com/security/cve/CVE-2021-21608
bugzilla.redhat.com/show_bug.cgi?id=1925140
cve.org/CVERecord?id=CVE-2021-21608
nvd.nist.gov/vuln/detail/CVE-2021-21608
access.redhat.com/security/cve/CVE-2021-21609
bugzilla.redhat.com/show_bug.cgi?id=1925141
cve.org/CVERecord?id=CVE-2021-21609
nvd.nist.gov/vuln/detail/CVE-2021-21609
access.redhat.com/security/cve/CVE-2021-21610
bugzilla.redhat.com/show_bug.cgi?id=1925151
cve.org/CVERecord?id=CVE-2021-21610
nvd.nist.gov/vuln/detail/CVE-2021-21610
access.redhat.com/security/cve/CVE-2021-21611
bugzilla.redhat.com/show_bug.cgi?id=1925145
cve.org/CVERecord?id=CVE-2021-21611
nvd.nist.gov/vuln/detail/CVE-2021-21611
access.redhat.com/security/cve/CVE-2021-21623
cve.org/CVERecord?id=CVE-2021-21623
nvd.nist.gov/vuln/detail/CVE-2021-21623
jenkins.io/security/advisory/2021-03-18
access.redhat.com/security/cve/CVE-2021-21639
cve.org/CVERecord?id=CVE-2021-21639
nvd.nist.gov/vuln/detail/CVE-2021-21639
access.redhat.com/security/cve/CVE-2021-21640
cve.org/CVERecord?id=CVE-2021-21640
nvd.nist.gov/vuln/detail/CVE-2021-21640
access.redhat.com/security/cve/CVE-2021-21642
bugzilla.redhat.com/show_bug.cgi?id=1952146
cve.org/CVERecord?id=CVE-2021-21642
nvd.nist.gov/vuln/detail/CVE-2021-21642
jenkins.io/security/advisory/2021-04-21
access.redhat.com/security/cve/CVE-2021-21643
bugzilla.redhat.com/show_bug.cgi?id=1952148
cve.org/CVERecord?id=CVE-2021-21643
nvd.nist.gov/vuln/detail/CVE-2021-21643
access.redhat.com/security/cve/CVE-2021-21644
bugzilla.redhat.com/show_bug.cgi?id=1952151
cve.org/CVERecord?id=CVE-2021-21644
nvd.nist.gov/vuln/detail/CVE-2021-21644
access.redhat.com/security/cve/CVE-2021-21645
bugzilla.redhat.com/show_bug.cgi?id=1952152
cve.org/CVERecord?id=CVE-2021-21645
nvd.nist.gov/vuln/detail/CVE-2021-21645
access.redhat.com/security/cve/CVE-2021-21648
cve.org/CVERecord?id=CVE-2021-21648
nvd.nist.gov/vuln/detail/CVE-2021-21648
jenkins.io/security/advisory/2021-05-11
access.redhat.com/security/cve/CVE-2021-25735
cve.org/CVERecord?id=CVE-2021-25735
access.redhat.com/security/cve/CVE-2021-25737
cve.org/CVERecord?id=CVE-2021-25737
github.com/kubernetes/kubernetes/issues/102106
groups.google.com/g/kubernetes-security-announce/c/xAiN3924thY
access.redhat.com/security/cve/CVE-2021-30465
bugzilla.redhat.com/show_bug.cgi?id=1954736
access.redhat.com/security/vulnerabilities/RHSB-2021-004
cve.org/CVERecord?id=CVE-2021-30465
nvd.nist.gov/vuln/detail/CVE-2021-30465
github.com/opencontainers/runc/security/advisories/GHSA-c3xm-pvg7-gh7r
ubuntu.com/security/CVE-2021-25735
openwall.com/lists/oss-security/2021/04/14/1
suse.com/security/cve/CVE-2015-7561
suse.com/security/cve/CVE-2016-9962
suse.com/security/cve/CVE-2017-1000056
suse.com/security/cve/CVE-2017-1002102
suse.com/security/cve/CVE-2018-1002100
suse.com/security/cve/CVE-2018-1002101
suse.com/security/cve/CVE-2018-16733
suse.com/security/cve/CVE-2018-19184
suse.com/security/cve/CVE-2019-1002100
suse.com/security/cve/CVE-2019-1002101
suse.com/security/cve/CVE-2019-11245
suse.com/security/cve/CVE-2019-11251
suse.com/security/cve/CVE-2019-11253
suse.com/security/cve/CVE-2020-26240
suse.com/security/cve/CVE-2020-26241
suse.com/security/cve/CVE-2020-8551
suse.com/security/cve/CVE-2020-8555
suse.com/security/cve/CVE-2020-8557
suse.com/security/cve/CVE-2020-8558
suse.com/security/cve/CVE-2020-8562
suse.com/security/cve/CVE-2020-8563
suse.com/security/cve/CVE-2020-8566
suse.com/security/cve/CVE-2021-25735
suse.com/security/cve/CVE-2021-25736
suse.com/security/cve/CVE-2021-25737
suse.com/security/cve/CVE-2021-25741
suse.com/security/cve/CVE-2021-25743
suse.com/security/cve/CVE-2021-30465
suse.com/security/cve/CVE-2022-29162
suse.com/security/cve/CVE-2022-29177
suse.com/security/cve/CVE-2022-3162
suse.com/security/cve/CVE-2022-3294
suse.com/security/cve/CVE-2023-2431
suse.com/security/cve/CVE-2023-25809
suse.com/security/cve/CVE-2023-2727
suse.com/security/cve/CVE-2023-2728
suse.com/security/cve/CVE-2023-27561
suse.com/security/cve/CVE-2023-28642
suse.com/security/cve/CVE-2023-5528
suse.com/security/cve/CVE-2024-45310
suse.com/security/cve/CVE-2024-5321
suse.com/security/cve/CVE-2025-3445
suse.com/security/cve/CVE-2025-47907
suse.com/security/cve/CVE-2025-47908