Every CVE Search/ Get API key

CVE-2021-25737

Holes in EndpointSlice Validation Enable Host Network Hijack

2.7 LowFix available

A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
High
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
None
Availability
None

Exploit likelihood

1.33%Up 0.7 points since Sep 6, 2021
90%50%10%1%

What each source reports

CVE List Score used 2.7

Holes in EndpointSlice Validation Enable Host Network Hijack

A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.

Record
CVE-2021-25737
CVSS 3.1
2.7 LowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Weakness
CWE-184
Updated
2026-11-02
EUVDEUVD-2021-2095 2.7

A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.

Record
EUVD-2021-2095
CVSS 3.1
2.7 LowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Updated
2026-11-03
GitHub AdvisoriesGHSA-mfv7-gq43-w965 4.8

Incomplete List of Disallowed Inputs in Kubernetes

A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.

Record
GHSA-mfv7-gq43-w965
CVSS 3.1
4.8 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-184, CWE-601
Updated
2026-11-02
NVD 2.7

A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.

Record
CVE-2021-25737
CVSS 3.1
2.7 LowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1
4.8 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
CVSS 2.0
4.9 MediumAV:N/AC:M/Au:S/C:P/I:P/A:N
Weakness
CWE-184, CWE-601
Updated
2026-11-02
OSV 4.8

A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.

Record
CVE-2021-25737
CVSS 3.1
4.8 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2021-25737 4.8

A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.

Record
DEBIAN-CVE-2021-25737
CVSS 3.1
4.8 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
Show 6 moreShow less
OSVGHSA-mfv7-gq43-w965 4.8

Incomplete List of Disallowed Inputs in Kubernetes

A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.

Record
GHSA-mfv7-gq43-w965
CVSS 3.1
4.8 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Weakness
CWE-184, CWE-601
Updated
2026-11-02
OSVOESA-2021-1373 6.5

kubernetes security update

Container cluster management.

Security Fix(es):

A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.(CVE-2021-25737)

A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.(CVE-2021-25735)

Record
OESA-2021-1373
CVSS 3.1
6.5 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:2437 8.6

Red Hat Security Advisory: OpenShift Container Platform 4.8.2 packages and security update

Record
RHSA-2021:2437
CVSS 3.1
8.6 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-25737 2.7

A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.

Record
UBUNTU-CVE-2021-25737
CVSS 3.1
2.7 LowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1
4.8 MediumCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Updated
2026-11-02
OSVGO-2022-0908 No score

Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

Incomplete List of Disallowed Inputs in Kubernetes in k8s.io/kubernetes

Record
GO-2022-0908
Updated
2026-11-02
OSVopenSUSE-SU-2025:15424-1 No score

govulncheck-vulndb-0.0.20250807T150727-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20250807T150727-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15424-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
k8s.io/kubernetes
Go
 1.16.0 up to 1.18.19
1.18.19
k8s.io/kubernetes
Go
 1.19.0 up to 1.19.11
1.19.11
k8s.io/kubernetes
Go
 1.20.0 up to 1.20.7
1.20.7
k8s.io/kubernetes
Go
 1.21.0 to 1.21.0
1.21.1
kubernetes
Debian:12
 before 1.20.5+really1.20.2-1
1.20.5+really1.20.2-1
kubernetes
Debian:13
 before 1.20.5+really1.20.2-1
1.20.5+really1.20.2-1
kubernetes
Debian:14
 before 1.20.5+really1.20.2-1
1.20.5+really1.20.2-1
k8s.io/kubernetes
Go
 1.21.0 up to 1.21.1
1.21.1
k8s.io/kubernetes
Go
 1.16.0 up to 1.18.19, 1.19.0 up to 1.19.11, 1.20.0 up to 1.20.7, 1.21.0 up to 1.21.1
1.18.191.19.111.20.71.21.1
kubernetes
openEuler:20.03-LTS-SP1
From an advisory covering 2 CVEs
 before 1.20.2-5.oe1
1.20.2-5.oe1
Show 182 moreShow less
Affected packages
PackageAffectedFixed
kubernetes
openEuler:20.03-LTS-SP2
From an advisory covering 2 CVEs
 before 1.20.2-5.oe1
1.20.2-5.oe1
ignition
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.9.0-6.rhaos4.8.el8
0:2.9.0-6.rhaos4.8.el8
ignition-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.9.0-6.rhaos4.8.el8
0:2.9.0-6.rhaos4.8.el8
ignition-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.9.0-6.rhaos4.8.el8
0:2.9.0-6.rhaos4.8.el8
ignition-validate
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.9.0-6.rhaos4.8.el8
0:2.9.0-6.rhaos4.8.el8
ignition-validate-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.9.0-6.rhaos4.8.el8
0:2.9.0-6.rhaos4.8.el8
openshift
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7
0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7
openshift-clients
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7
0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7
openshift-clients-redistributable
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7
0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el7
openshift-hyperkube
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7
0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el7
openshift
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8
0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8
openshift-clients
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8
0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8
openshift-clients-redistributable
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8
0:4.8.0-202106281541.p0.git.1077b05.assembly.stream.el8
openshift-hyperkube
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8
0:4.8.0-202107161820.p0.git.051ac4f.assembly.stream.el8
cri-o
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:1.21.2-5.rhaos4.8.gitb27d974.el7
0:1.21.2-5.rhaos4.8.gitb27d974.el7
cri-o-debuginfo
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:1.21.2-5.rhaos4.8.gitb27d974.el7
0:1.21.2-5.rhaos4.8.gitb27d974.el7
cri-tools
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:1.21.0-2.el7
0:1.21.0-2.el7
cri-tools-debuginfo
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:1.21.0-2.el7
0:1.21.0-2.el7
haproxy
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:2.2.13-1.el7
0:2.2.13-1.el7
haproxy-debuginfo
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:2.2.13-1.el7
0:2.2.13-1.el7
openshift-ansible
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7
0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7
openshift-ansible-test
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7
0:4.8.0-202106281541.p0.git.626f7a3.assembly.stream.el7
runc
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:1.0.0-98.rhaos4.8.gitcd80260.el7
0:1.0.0-98.rhaos4.8.gitcd80260.el7
runc-debuginfo
Red Hat:openshift:4.8::el7
From an advisory covering 26 CVEs
 before 0:1.0.0-98.rhaos4.8.gitcd80260.el7
0:1.0.0-98.rhaos4.8.gitcd80260.el7
afterburn
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:5.0.0-1.rhaos4.8.el8
0:5.0.0-1.rhaos4.8.el8
afterburn-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:5.0.0-1.rhaos4.8.el8
0:5.0.0-1.rhaos4.8.el8
atomic-openshift-service-idler
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.39cfc66.assembly.stream.el8
0:4.8.0-202106281541.p0.git.39cfc66.assembly.stream.el8
butane
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.12.1-1.rhaos4.8.el8
0:0.12.1-1.rhaos4.8.el8
butane-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.12.1-1.rhaos4.8.el8
0:0.12.1-1.rhaos4.8.el8
console-login-helper-messages
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.20.3-1.rhaos4.8.el8
0:0.20.3-1.rhaos4.8.el8
console-login-helper-messages-issuegen
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.20.3-1.rhaos4.8.el8
0:0.20.3-1.rhaos4.8.el8
console-login-helper-messages-profile
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.20.3-1.rhaos4.8.el8
0:0.20.3-1.rhaos4.8.el8
coreos-installer
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.9.0-6.rhaos4.8.el8
0:0.9.0-6.rhaos4.8.el8
coreos-installer-bootinfra
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.9.0-6.rhaos4.8.el8
0:0.9.0-6.rhaos4.8.el8
coreos-installer-bootinfra-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.9.0-6.rhaos4.8.el8
0:0.9.0-6.rhaos4.8.el8
coreos-installer-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.9.0-6.rhaos4.8.el8
0:0.9.0-6.rhaos4.8.el8
coreos-installer-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.9.0-6.rhaos4.8.el8
0:0.9.0-6.rhaos4.8.el8
cri-o
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.21.2-5.rhaos4.8.gitb27d974.el8
0:1.21.2-5.rhaos4.8.gitb27d974.el8
cri-o-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.21.2-5.rhaos4.8.gitb27d974.el8
0:1.21.2-5.rhaos4.8.gitb27d974.el8
cri-o-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.21.2-5.rhaos4.8.gitb27d974.el8
0:1.21.2-5.rhaos4.8.gitb27d974.el8
cri-tools
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.21.0-2.el8
0:1.21.0-2.el8
cri-tools-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.21.0-2.el8
0:1.21.0-2.el8
cri-tools-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.21.0-2.el8
0:1.21.0-2.el8
haproxy
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.2.13-1.el8
0:2.2.13-1.el8
haproxy-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.2.13-1.el8
0:2.2.13-1.el8
ironic-images
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2021.1-20210614.1.el8
0:2021.1-20210614.1.el8
ironic-images-all
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2021.1-20210614.1.el8
0:2021.1-20210614.1.el8
ironic-images-ipa-ppc64le
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2021.1-20210614.1.el8
0:2021.1-20210614.1.el8
ironic-images-ipa-x86_64
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2021.1-20210614.1.el8
0:2021.1-20210614.1.el8
jenkins
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.289.1.1624020353-1.el8
0:2.289.1.1624020353-1.el8
jenkins-2-plugins
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.1624022417-1.el8
0:4.8.1624022417-1.el8
kata-containers
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.1.0-4.el8
0:2.1.0-4.el8
openshift-kuryr
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
openshift-kuryr-cni
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
openshift-kuryr-common
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
openshift-kuryr-controller
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
openstack-ironic
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 1:17.0.4-0.20210713221218.a415e7e.el8
1:17.0.4-0.20210713221218.a415e7e.el8
openstack-ironic-api
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 1:17.0.4-0.20210713221218.a415e7e.el8
1:17.0.4-0.20210713221218.a415e7e.el8
openstack-ironic-common
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 1:17.0.4-0.20210713221218.a415e7e.el8
1:17.0.4-0.20210713221218.a415e7e.el8
openstack-ironic-conductor
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 1:17.0.4-0.20210713221218.a415e7e.el8
1:17.0.4-0.20210713221218.a415e7e.el8
openstack-ironic-inspector
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:10.6.1-0.20210406091336.579f59c.el8
0:10.6.1-0.20210406091336.579f59c.el8
openstack-ironic-inspector-api
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:10.6.1-0.20210406091336.579f59c.el8
0:10.6.1-0.20210406091336.579f59c.el8
openstack-ironic-inspector-conductor
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:10.6.1-0.20210406091336.579f59c.el8
0:10.6.1-0.20210406091336.579f59c.el8
openstack-ironic-inspector-dnsmasq
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:10.6.1-0.20210406091336.579f59c.el8
0:10.6.1-0.20210406091336.579f59c.el8
openstack-ironic-python-agent
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:7.0.2-0.20210611153100.bfa97cb.el8
0:7.0.2-0.20210611153100.bfa97cb.el8
openvswitch2.15
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.15.0-9.el8fdp
0:2.15.0-9.el8fdp
openvswitch2.15-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.15.0-9.el8fdp
0:2.15.0-9.el8fdp
openvswitch2.15-devel
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.15.0-9.el8fdp
0:2.15.0-9.el8fdp
openvswitch2.15-ipsec
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.15.0-9.el8fdp
0:2.15.0-9.el8fdp
ostree
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ostree-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ostree-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ostree-devel
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ostree-grub2
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ostree-libs
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ostree-libs-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2020.7-5.el8_4
0:2020.7-5.el8_4
ovn2.13
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-central
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-central-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-host
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-host-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-vtep
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
ovn2.13-vtep-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:20.12.0-25.el8fdp
0:20.12.0-25.el8fdp
podman
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-catatonit-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-docker
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-plugins-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-remote
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-remote-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
podman-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.0.1-6.el8
0:3.0.1-6.el8
python-debtcollector
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.2.0-0.20210324220630.649189d.el8
0:2.2.0-0.20210324220630.649189d.el8
python-eventlet
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.25.2-4.el8
0:0.25.2-4.el8
python-hardware
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.27.0-0.20210406121246.756fedb.el8
0:0.27.0-0.20210406121246.756fedb.el8
python-ironic-lib
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.6.2-0.20210608101214.ca2e4ba.el8
0:4.6.2-0.20210608101214.ca2e4ba.el8
python-ironic-prometheus-exporter
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.2.1-0.20210325143713.70e39c8.el8
0:2.2.1-0.20210325143713.70e39c8.el8
python-jsonschema
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.2.0-5.el8ost
0:3.2.0-5.el8ost
python-keystoneauth1
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.3.0-0.20210325001456.6a66271.el8
0:4.3.0-0.20210325001456.6a66271.el8
python-kubernetes
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:12.0.1-1.el8
0:12.0.1-1.el8
python-openshift
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 1:0.12.1-1.el8
1:0.12.1-1.el8
python-openstacksdk
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.53.0-0.20210325011601.4629245.el8
0:0.53.0-0.20210325011601.4629245.el8
python-oslo-concurrency
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.4.0-0.20210325004915.7dcf9e9.el8
0:4.4.0-0.20210325004915.7dcf9e9.el8
python-oslo-concurrency-lang
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.4.0-0.20210325004915.7dcf9e9.el8
0:4.4.0-0.20210325004915.7dcf9e9.el8
python-oslo-config
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 2:8.5.0-0.20210325050501.cfa2564.el8
2:8.5.0-0.20210325050501.cfa2564.el8
python-oslo-context
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.2.0-0.20210325043103.0d02866.el8
0:3.2.0-0.20210325043103.0d02866.el8
python-oslo-db
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:8.5.0-0.20210325041241.503db60.el8
0:8.5.0-0.20210325041241.503db60.el8
python-oslo-db-lang
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:8.5.0-0.20210325041241.503db60.el8
0:8.5.0-0.20210325041241.503db60.el8
python-oslo-i18n
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:5.0.1-0.20210324221600.73187bd.el8
0:5.0.1-0.20210324221600.73187bd.el8
python-oslo-i18n-lang
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:5.0.1-0.20210324221600.73187bd.el8
0:5.0.1-0.20210324221600.73187bd.el8
python-oslo-log
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.4.0-0.20210409081224.9b29c90.el8
0:4.4.0-0.20210409081224.9b29c90.el8
python-oslo-log-lang
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.4.0-0.20210409081224.9b29c90.el8
0:4.4.0-0.20210409081224.9b29c90.el8
python-oslo-policy
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.7.0-0.20210325051823.d853485.el8
0:3.7.0-0.20210325051823.d853485.el8
python-oslo-policy-lang
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.7.0-0.20210325051823.d853485.el8
0:3.7.0-0.20210325051823.d853485.el8
python-oslo-serialization
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.1.0-0.20210325012242.8445e61.el8
0:4.1.0-0.20210325012242.8445e61.el8
python-oslo-service
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.5.0-0.20210325014731.d25e454.el8
0:2.5.0-0.20210325014731.d25e454.el8
python-oslo-upgradecheck
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.3.0-0.20210325003851.9f95a6e.el8
0:1.3.0-0.20210325003851.9f95a6e.el8
python-oslo-utils
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-0.20210325043201.3288539.el8
0:4.8.0-0.20210325043201.3288539.el8
python-oslo-utils-lang
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-0.20210325043201.3288539.el8
0:4.8.0-0.20210325043201.3288539.el8
python-pyrsistent
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.16.0-3.el8ost
0:0.16.0-3.el8ost
python-stevedore
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.3.0-0.20210325001012.7d7154f.el8
0:3.3.0-0.20210325001012.7d7154f.el8
python-sushy
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.7.1-0.20210428165244.bc49878.el8
0:3.7.1-0.20210428165244.bc49878.el8
python-sushy-oem-idrac
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.0.1-0.20210326152858.83b7eb0.el8
0:2.0.1-0.20210326152858.83b7eb0.el8
python-tooz
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.8.0-0.20210324235001.54448e9.el8
0:2.8.0-0.20210324235001.54448e9.el8
python3-debtcollector
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.2.0-0.20210324220630.649189d.el8
0:2.2.0-0.20210324220630.649189d.el8
python3-eventlet
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.25.2-4.el8
0:0.25.2-4.el8
python3-hardware
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.27.0-0.20210406121246.756fedb.el8
0:0.27.0-0.20210406121246.756fedb.el8
python3-hardware-detect
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.27.0-0.20210406121246.756fedb.el8
0:0.27.0-0.20210406121246.756fedb.el8
python3-ironic-inspector-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:10.6.1-0.20210406091336.579f59c.el8
0:10.6.1-0.20210406091336.579f59c.el8
python3-ironic-lib
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.6.2-0.20210608101214.ca2e4ba.el8
0:4.6.2-0.20210608101214.ca2e4ba.el8
python3-ironic-prometheus-exporter
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.2.1-0.20210325143713.70e39c8.el8
0:2.2.1-0.20210325143713.70e39c8.el8
python3-ironic-python-agent
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:7.0.2-0.20210611153100.bfa97cb.el8
0:7.0.2-0.20210611153100.bfa97cb.el8
python3-ironic-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 1:17.0.4-0.20210713221218.a415e7e.el8
1:17.0.4-0.20210713221218.a415e7e.el8
python3-jsonschema
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.2.0-5.el8ost
0:3.2.0-5.el8ost
python3-keystoneauth1
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.3.0-0.20210325001456.6a66271.el8
0:4.3.0-0.20210325001456.6a66271.el8
python3-kubernetes
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:12.0.1-1.el8
0:12.0.1-1.el8
python3-kubernetes-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:12.0.1-1.el8
0:12.0.1-1.el8
python3-kuryr-kubernetes
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
0:4.8.0-202106281541.p0.git.8a4c2d8.assembly.stream.el8
python3-openshift
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 1:0.12.1-1.el8
1:0.12.1-1.el8
python3-openstacksdk
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.53.0-0.20210325011601.4629245.el8
0:0.53.0-0.20210325011601.4629245.el8
python3-openstacksdk-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.53.0-0.20210325011601.4629245.el8
0:0.53.0-0.20210325011601.4629245.el8
python3-openvswitch2.15
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.15.0-9.el8fdp
0:2.15.0-9.el8fdp
python3-openvswitch2.15-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.15.0-9.el8fdp
0:2.15.0-9.el8fdp
python3-oslo-concurrency
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.4.0-0.20210325004915.7dcf9e9.el8
0:4.4.0-0.20210325004915.7dcf9e9.el8
python3-oslo-concurrency-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.4.0-0.20210325004915.7dcf9e9.el8
0:4.4.0-0.20210325004915.7dcf9e9.el8
python3-oslo-config
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 2:8.5.0-0.20210325050501.cfa2564.el8
2:8.5.0-0.20210325050501.cfa2564.el8
python3-oslo-context
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.2.0-0.20210325043103.0d02866.el8
0:3.2.0-0.20210325043103.0d02866.el8
python3-oslo-db
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:8.5.0-0.20210325041241.503db60.el8
0:8.5.0-0.20210325041241.503db60.el8
python3-oslo-db-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:8.5.0-0.20210325041241.503db60.el8
0:8.5.0-0.20210325041241.503db60.el8
python3-oslo-i18n
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:5.0.1-0.20210324221600.73187bd.el8
0:5.0.1-0.20210324221600.73187bd.el8
python3-oslo-log
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.4.0-0.20210409081224.9b29c90.el8
0:4.4.0-0.20210409081224.9b29c90.el8
python3-oslo-log-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.4.0-0.20210409081224.9b29c90.el8
0:4.4.0-0.20210409081224.9b29c90.el8
python3-oslo-policy
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.7.0-0.20210325051823.d853485.el8
0:3.7.0-0.20210325051823.d853485.el8
python3-oslo-serialization
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.1.0-0.20210325012242.8445e61.el8
0:4.1.0-0.20210325012242.8445e61.el8
python3-oslo-serialization-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.1.0-0.20210325012242.8445e61.el8
0:4.1.0-0.20210325012242.8445e61.el8
python3-oslo-service
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.5.0-0.20210325014731.d25e454.el8
0:2.5.0-0.20210325014731.d25e454.el8
python3-oslo-service-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.5.0-0.20210325014731.d25e454.el8
0:2.5.0-0.20210325014731.d25e454.el8
python3-oslo-upgradecheck
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.3.0-0.20210325003851.9f95a6e.el8
0:1.3.0-0.20210325003851.9f95a6e.el8
python3-oslo-utils
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-0.20210325043201.3288539.el8
0:4.8.0-0.20210325043201.3288539.el8
python3-oslo-utils-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:4.8.0-0.20210325043201.3288539.el8
0:4.8.0-0.20210325043201.3288539.el8
python3-pyrsistent
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.16.0-3.el8ost
0:0.16.0-3.el8ost
python3-pyrsistent-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.16.0-3.el8ost
0:0.16.0-3.el8ost
python3-stevedore
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.3.0-0.20210325001012.7d7154f.el8
0:3.3.0-0.20210325001012.7d7154f.el8
python3-sushy
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.7.1-0.20210428165244.bc49878.el8
0:3.7.1-0.20210428165244.bc49878.el8
python3-sushy-oem-idrac
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.0.1-0.20210326152858.83b7eb0.el8
0:2.0.1-0.20210326152858.83b7eb0.el8
python3-sushy-oem-idrac-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.0.1-0.20210326152858.83b7eb0.el8
0:2.0.1-0.20210326152858.83b7eb0.el8
python3-sushy-tests
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:3.7.1-0.20210428165244.bc49878.el8
0:3.7.1-0.20210428165244.bc49878.el8
python3-tooz
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:2.8.0-0.20210324235001.54448e9.el8
0:2.8.0-0.20210324235001.54448e9.el8
redhat-release-coreos
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:48.84-4.el8
0:48.84-4.el8
rteval-loads
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.4-12.el8
0:1.4-12.el8
rteval-loads-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.4-12.el8
0:1.4-12.el8
runc
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.0.0-98.rhaos4.8.gitcd80260.el8
0:1.0.0-98.rhaos4.8.gitcd80260.el8
runc-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.0.0-98.rhaos4.8.gitcd80260.el8
0:1.0.0-98.rhaos4.8.gitcd80260.el8
runc-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:1.0.0-98.rhaos4.8.gitcd80260.el8
0:1.0.0-98.rhaos4.8.gitcd80260.el8
rust-afterburn
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:5.0.0-1.rhaos4.8.el8
0:5.0.0-1.rhaos4.8.el8
rust-afterburn-debugsource
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:5.0.0-1.rhaos4.8.el8
0:5.0.0-1.rhaos4.8.el8
stress-ng
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.12.06-1.el8
0:0.12.06-1.el8
stress-ng-debuginfo
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.12.06-1.el8
0:0.12.06-1.el8
toolbox
Red Hat:openshift:4.8::el8
From an advisory covering 26 CVEs
 before 0:0.0.8-3.rhaos4.8.el8
0:0.0.8-3.rhaos4.8.el8
govulncheck-vulndb
openSUSE:Tumbleweed
From an advisory covering 44 CVEs
 before 0.0.20250807T150727-1.1
0.0.20250807T150727-1.1

History

History
RecordedChangedSources
affected, facts
affected
aliases, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-25737 is a low vulnerability (CVSS 2.7) in Kubernetes, published September 6, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.33%, the 71st percentile. Fixed in k8s.io/kubernetes 1.18.19.

References

Show 162 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open