UpHeron
All vulnerabilities

Servers and applications

CVE-2021-25736

Kube-proxy on Windows can unintentionally forward traffic to local processes listening on the same port (“spec.ports[*].port”) as a LoadBalancer Service when the LoadBalancer controller does not set the “status.loadBalancer.ingress[].ip” field. Clusters where the LoadBalancer controller sets the “status.loadBalancer.ingress[].ip” field are unaffected.

Severity
Medium 6.3
Published
30 Oct 2023
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.18.18, 1.19.10, 1.20.6
Sources
NVD

Affected software

SoftwareAffected versions
KubernetesServers and applications · cpe:a:kubernetes:kubernetes
  • From 1.18.0 before 1.18.18
  • From 1.19.0 before 1.19.10
  • From 1.20.0 before 1.20.6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-25736
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-25736