PT-2021-20799 · Unknown · Ovn Kubernetes

Przemyslaw Roguski · Published 2021-06-02 · Updated 2023-02-12 · CVE-2021-3499

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: OVN Kubernetes versions up to and including 0.3.0

Description: A vulnerability was found in OVN Kubernetes where the Egress Firewall does not reliably apply firewall rules when there are multiple DNS rules. This could lead to a potential loss of confidentiality, integrity, or availability of a service.

Recommendations: For OVN Kubernetes versions up to and including 0.3.0, consider restricting the use of multiple DNS rules in the Egress Firewall until a patch is available. As a temporary workaround, review and manually apply firewall rules to ensure service confidentiality, integrity, and availability. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2021-3499

GHSA-57V4-M9JX-MH8R

Affected Products

Ovn Kubernetes

References · 7

• https://osv.dev/vulnerability/CVE-2021-3499 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3499 · Security Note
• https://osv.dev/vulnerability/GHSA-57v4-m9jx-mh8r · Vendor Advisory
• https://github.com/ovn-org/ovn-kubernetes/pull/2169 · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1949188 · Note
• https://access.redhat.com/security/cve/CVE-2021-3499 · Note
• https://access.redhat.com/errata/RHBA-2021:1550 · Note