Approved changes feed: RSS · Atom

cpe:2.3:a:kubernetes:kubernetes:1.21.0:-:*:*:*:*:*:*

part: a version: 1.21.0 update: -

VendorKubernetes (3ee05930-9e42-51b2-ad52-30832f573b15)
ProductKubernetes (1a2d2535-9ff1-599e-92b3-aa33ed592780)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:code.google/kubernetes purl2cpe 2026-06-01 10:13:27.661658
pkg:github/kubernetes/kubernetes purl2cpe 2026-06-01 10:13:27.661659

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-25737 vulnerable 2026-06-03 14:44:05.807287 Holes in EndpointSlice Validation Enable Host Network Hijack
LOW (2.7)
A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.
Published: 2021-09-06T11:32:01.989Z
Updated: 2024-09-16T21:04:34.209Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.