CVE-2021-25736

See a problem?
Source
https://nvd.nist.gov/vuln/detail/CVE-2021-25736
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-25736.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-25736
Aliases
Related
Published
2023-10-30T03:15:07Z
Modified
2024-05-29T22:12:27Z
Severity
  • 6.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N CVSS Calculator
Summary
[none]
Details

Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port (“spec.ports[*].port”) as a LoadBalancer Service when the LoadBalancer controller does not set the “status.loadBalancer.ingress[].ip” field. Clusters where the LoadBalancer controller sets the “status.loadBalancer.ingress[].ip” field are unaffected.

References

Affected packages

Git / github.com/kubernetes/kubelet

Affected ranges

Type
GIT
Repo
https://github.com/kubernetes/kubelet
Events