GHSA-57v4-m9jx-mh8r

ghsaUSosv

Improper Input Validation

view advisory published 2021-06-08Licence: CC-BY-4.0

A vulnerability was found in OVN Kubernetes in versions up to and including 0.3.0 where the Egress Firewall does not reliably apply firewall rules when there is multiple DNS rules. It could lead to potentially lose of confidentiality, integrity or availability of a service

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2021-3499US	medium5.6OT elevated	0.80% (56th)	—	2021-06-02
A vulnerability was found in OVN Kubernetes in versions up to and including 0.3.0 where the Egress Firewall does not reliably apply firewall rules when there is multiple DNS rules.…

references

External citations — patches, advisories, analysis.

https://access.redhat.com/errata/RHBA-2021:1550WEB
https://access.redhat.com/security/cve/CVE-2021-3499WEB
https://bugzilla.redhat.com/show_bug.cgi?id=1949188WEB
https://github.com/ovn-org/ovn-kubernetes/pull/2169WEB
https://nvd.nist.gov/vuln/detail/CVE-2021-3499ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan