Monday, August 2, 2021

Red Hat OpenShift: CVE-2021-25737: kubernetes: Holes in EndpointSlice Validation Enable Host Network Hijack

rapid7 vulnerabilities In: rapid7, vulnerabilities

Description
A security issue was discovered in Kubernetes where an authorized user may be able to redirect traffic to private networks on a Node. An untrusted user could exploit this by creating or modifying EndpointSlices to point to localhost or link-local addresses.    
Solution(s)
linuxrpm-upgrade-openshift


Referenceshttps://attackerkb.com/topics/cve-2021-25737
CVE - 2021-25737
RHSA-2021:2437