PT-2021-6816 · Unknown+2 · Kubernetes+1

John Howard · Published 2021-05-18 · Updated 2025-08-08 · CVE-2021-25737

Positive Technologies (AI Summary)

CVSS v2.0

4.9

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Kubernetes (affected versions not specified)

Description A security issue in Kubernetes allows a remote attacker to redirect pod traffic to private networks on a Node, potentially accessing confidential data and compromising its integrity. The issue is related to the lack of validation on EndpointSlice IPs, which was already performed on Endpoint IPs in the localhost or link-local range.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incomplete List of Disallowed Inputs

Open Redirect

Weakness Enumeration

CWE-184

CWE-601

Related Identifiers

ALT-PU-2021-2101

ALT-PU-2022-1245

BDU:2022-02241

CVE-2021-25737

GHSA-MFV7-GQ43-W965

GO-2022-0908

OESA-2021-1373

OPENSUSE-SU-2025:15424-1

RHSA-2021:2437

Affected Products

Alt Linux

Kubernetes

References · 73

• https://github.com/kubernetes/kubernetes/issues/102106 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2021-25737 · Security Note
• https://osv.dev/vulnerability/GO-2022-0908 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-25737 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-25737 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-25737 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-25737 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-25737 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:15424-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-25735 · Security Note
• https://bdu.fstec.ru/vul/2022-02241 · Security Note
• https://osv.dev/vulnerability/OESA-2021-1373 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-mfv7-gq43-w965 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-25737 · Vendor Advisory
• https://github.com/kubernetes/kubernetes · Note