CVE-2021-25737
A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.
| Software | From | Fixed in |
|---|---|---|
| kubernetes / kubernetes | 1.19.0 | 1.19.10 |
| kubernetes / kubernetes | 1.16.0 | 1.18.19 |
| kubernetes / kubernetes | 1.20.0 | 1.20.7 |
| kubernetes / kubernetes | 1.21.0 | 1.21.0.x |
k8s.io/kubernetes
|
1.16.0 | 1.18.19 |
|
k8s.io/kubernetes
|
1.19.0 | 1.19.11 |
|
k8s.io/kubernetes
|
1.20.0 | 1.20.7 |
|
k8s.io/kubernetes
|
1.21.0 | 1.21.0.x |
|
k8s.io/kubernetes
|
1.21.0 | 1.21.1 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime