CVE-2021-25735 — Vulnetix

Try Vulnetix Request Demo

CVE-2021-25735 REJECTED

A security issue was discovered in kube-apiserver that could allow node updates to bypass a Validating Admission Webhook. Clusters are only affected by this vulnerability if they run a Validating Admission Webhook for Nodes that denies admission based at least partially on the old state of the Node object. Validating Admission Webhook does not observe some previous fields.

EPSS 14.39% · 94.4th percentile

Risk Scores

EPSS Score

14.39%

94.4th percentile

Affected Products

Vendor	Product	Versions
Ubuntu:24.04:LTS	kubernetes	0, 1.0
Ubuntu:Pro:20.04:LTS	kubernetes	0, 1.0
Ubuntu:22.04:LTS	kubernetes	0, 1.0

Timeline

May 28, 2021 CVE Published
Sep 6, 2021 EPSS Score
Dec 29, 2021 EPSS Score
Feb 4, 2022 EPSS Score
Apr 12, 2022 CVE Updated
Apr 23, 2022 EPSS Score
Aug 16, 2022 EPSS Score
Oct 12, 2022 EPSS Score
Feb 4, 2023 EPSS Score
Apr 2, 2023 EPSS Score
May 29, 2023 EPSS Score
Sep 21, 2023 EPSS Score

References

https://ubuntu.com/security/CVE-2021-25735 third-party-advisory
https://www.openwall.com/lists/oss-security/2021/04/14/1 third-party-advisory
https://github.com/kubernetes/kubernetes/issues/100096 third-party-advisory
https://www.cve.org/CVERecord?id=CVE-2021-25735 third-party-advisory

Open in Interactive Console →