CVE-2021-25737 — Holes in EndpointSlice Validation Enable Host Network Hijack
A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IP…
Published: 2021-09-06 · CVSS: 2.7 · CVSS 3.1
A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7