CVE-2021-25741

See a problem?
Please try reporting it to the source first.
Source
https://nvd.nist.gov/vuln/detail/CVE-2021-25741
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-25741.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-25741
Aliases
Related
Published
2021-09-20T17:15:08Z
Modified
2025-03-29T06:04:50.339737Z
Downstream
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
[none]
Details

A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.

References

Affected packages

Debian:11 / kubernetes

Package

Name
kubernetes
Purl
pkg:deb/debian/kubernetes?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.5+really1.20.2-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:12 / kubernetes

Package

Name
kubernetes
Purl
pkg:deb/debian/kubernetes?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.5+really1.20.2-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Debian:13 / kubernetes

Package

Name
kubernetes
Purl
pkg:deb/debian/kubernetes?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
1.20.5+really1.20.2-1

Ecosystem specific 

{
    "urgency": "not yet assigned"
}

Git / github.com/kubernetes/kubelet

Affected ranges

Type
GIT
Repo
https://github.com/kubernetes/kubelet
Events
Introduced
30b4cd52c54df86ed93459ba84b3e61877fc28ea
Last affected
200af98d7e281e6dca0d79168a52cbdc1b434957
Introduced
cb25f113ccf051d34612b05d6c04c1f892167b0c
Last affected
8f730ee1186d7f2af4af2041696c66f89c287af2
Last affected
be67f1bbc192a7d4993c16809ee6d923ce59cb2f
Introduced
2f96697a6b8649844ec80a9bbe6d7cde3b197f5b
Last affected
e58dbfbf5a665705736cae9c5fe2fb4895aca2ef
Type
GIT
Repo
https://github.com/kubernetes/kubernetes
Events
Last affected
0fd2b5afdfe3134d6e1531365fdb37dd11f54d1c
Introduced
cb303e613a121a29364f75cc67d3d580833a7479
Last affected
3cce4a82b44f032d0cd1a1790e6d2f5a55d20aae
Introduced
c2b5237ccd9c0f1d600d3072634ca66cefdf272f
Last affected
632ed300f2c34f6d6d15ca4cef3d3c7073412212
Introduced
af46c47ce925f4c4ad5cc8d1fca46c7b77d13b38
Last affected
8152330a2b6ca3621196e62966ef761b8f5a61bb

Affected versions

v1.*

v1.20.0
v1.20.1
v1.20.1-rc.0
v1.20.1-rc.1
v1.20.10
v1.20.10-rc.0
v1.20.2
v1.20.2-rc.0
v1.20.3
v1.20.3-rc.0
v1.20.4
v1.20.4-rc.0
v1.20.5
v1.20.5-rc.0
v1.20.6
v1.20.6-rc.0
v1.20.7
v1.20.7-rc.0
v1.20.8
v1.20.8-rc.0
v1.20.9
v1.20.9-rc.0
v1.21.0
v1.21.1
v1.21.1-rc.0
v1.21.2
v1.21.2-rc.0
v1.21.3
v1.21.3-rc.0
v1.21.4
v1.21.4-rc.0
v1.22.0
v1.22.1
v1.22.1-rc.0