PT-2022-9681 · Kubernetes+4 · Kubernetes+5

Eviatar Gerzi + 1 · Published 2020-07-03 · Updated 2025-10-08 · CVE-2021-25743

Positive Technologies (AI Summary)

CVSS v3.1

3.0

Low

Base vector

AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions kubernetes (affected versions not specified)

Description The issue is related to the handling of raw data output to a terminal by kubectl. Specifically, it does not neutralize escape, meta, or control sequences contained in this data. This affects unstructured string fields in objects such as Events.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-150

CWE-20

Related Identifiers

ALT-PU-2020-2299

ALT-PU-2020-2338

BDU:2025-12934

CVE-2021-25743

GHSA-F9JG-8P32-2F55

GO-2022-0983

OESA-2022-2132

OESA-2023-1020

OPENSUSE-SU-2024_3341-1

OPENSUSE-SU-2024_3343-1

OPENSUSE-SU-2025:15424-1

SUSE-SU-2024:2858-1

SUSE-SU-2024:2859-1

SUSE-SU-2024:2928-1

SUSE-SU-2024:3341-1

SUSE-SU-2024:3343-1

SUSE-SU-2024_2858-1

SUSE-SU-2024_2859-1

SUSE-SU-2024_2928-1

SUSE-SU-2025:02423-1

SUSE-SU-2025:02423-2

SUSE-SU-2025_02423-2

Affected Products

Alt Linux

Debian

Red Os

Suse

Kubectl

Kubernetes

References · 108

• https://github.com/kubernetes/kubernetes/issues/101695 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2859-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:3341-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-12934 · Security Note
• https://osv.dev/vulnerability/CVE-2021-25743 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2021-25743 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-25743 · Security Note
• https://osv.dev/vulnerability/GO-2022-0983 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-f9jg-8p32-2f55 · Vendor Advisory
• https://osv.dev/vulnerability/OESA-2023-1020 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2025:02423-2 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2928-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15424-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2021-25743 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2021-25743 · Vendor Advisory