CVE-2021-25740
Fixed in a distro release EPSS 2%CVSS 3.1
A security issue was discovered with Kubernetes that could enable users to send network traffic to locations they would otherwise not have access to via a confused deputy attack.
Products: Kubernetes
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | k8s.io/kubernetes | no fix |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | kube-apiserver-1.28 | 0 |
| Chainguard | kube-apiserver-1.28-default | 0 |
| Chainguard | kube-apiserver-1.29 | 0 |
| Chainguard | kube-apiserver-1.29-default | 0 |
| Chainguard | kube-apiserver-1.30 | 0 |
| Chainguard | kube-apiserver-1.30-default | 0 |
| Chainguard | kube-apiserver-1.31 | 0 |
| Chainguard | kube-apiserver-1.31-default | 0 |
| Chainguard | kube-apiserver-1.32 | 0 |
| Chainguard | kube-apiserver-1.32-default | 0 |
| Chainguard | kube-controller-manager-1.28 | 0 |
| Chainguard | kube-controller-manager-1.28-default | 0 |
| Chainguard | kube-controller-manager-1.29 | 0 |
| Chainguard | kube-controller-manager-1.29-default | 0 |
| Chainguard | kube-controller-manager-1.30 | 0 |
| Chainguard | kube-controller-manager-1.30-default | 0 |
| Chainguard | kube-controller-manager-1.31 | 0 |
| Chainguard | kube-controller-manager-1.31-default | 0 |
| Chainguard | kube-controller-manager-1.32 | 0 |
| Chainguard | kube-controller-manager-1.32-default | 0 |
| Chainguard | kube-proxy-1.28 | 0 |
| Chainguard | kube-proxy-1.28-default | 0 |
| Chainguard | kube-proxy-1.28-default-compat | 0 |
| Chainguard | kube-proxy-1.29 | 0 |
| Chainguard | kube-proxy-1.29-default | 0 |
| Chainguard | kube-proxy-1.29-default-compat | 0 |
| Chainguard | kube-proxy-1.30 | 0 |
| Chainguard | kube-proxy-1.30-default | 0 |
| Chainguard | kube-proxy-1.30-default-compat | 0 |
| Chainguard | kube-proxy-1.31 | 0 |
| Chainguard | kube-proxy-1.31-default | 0 |
| Chainguard | kube-proxy-1.31-default-compat | 0 |
| Chainguard | kube-proxy-1.32 | 0 |
| Chainguard | kube-proxy-1.32-default | 0 |
| Chainguard | kube-proxy-1.32-default-compat | 0 |
| Chainguard | kube-scheduler-1.28 | 0 |
| Chainguard | kube-scheduler-1.28-default | 0 |
| Chainguard | kube-scheduler-1.29 | 0 |
| Chainguard | kube-scheduler-1.29-default | 0 |
| Chainguard | kube-scheduler-1.30 | 0 |
| Chainguard | kube-scheduler-1.30-default | 0 |
| Chainguard | kube-scheduler-1.31 | 0 |
| Chainguard | kube-scheduler-1.31-default | 0 |
| Chainguard | kube-scheduler-1.32 | 0 |
| Chainguard | kube-scheduler-1.32-default | 0 |
| Chainguard | kubeadm-1.28 | 0 |
| Chainguard | kubeadm-1.28-default | 0 |
| Chainguard | kubeadm-1.29 | 0 |
| Chainguard | kubeadm-1.29-default | 0 |
| Chainguard | kubeadm-1.30 | 0 |
| Chainguard | kubeadm-1.30-default | 0 |
| Chainguard | kubeadm-1.31 | 0 |
| Chainguard | kubeadm-1.31-default | 0 |
| Chainguard | kubeadm-1.32 | 0 |
| Chainguard | kubeadm-1.32-default | 0 |
| Chainguard | kubectl-1.28 | 0 |
| Chainguard | kubectl-1.28-bitnami-compat | 0 |
| Chainguard | kubectl-1.28-default | 0 |
| Chainguard | kubectl-1.29 | 0 |
| Chainguard | kubectl-1.29-bitnami-compat | 0 |
| Chainguard | kubectl-1.29-default | 0 |
| Chainguard | kubectl-1.30 | 0 |
| Chainguard | kubectl-1.30-bitnami-compat | 0 |
| Chainguard | kubectl-1.30-default | 0 |
| Chainguard | kubectl-1.31 | 0 |
| Chainguard | kubectl-1.31-bitnami-compat | 0 |
| Chainguard | kubectl-1.31-default | 0 |
| Chainguard | kubectl-1.32 | 0 |
| Chainguard | kubectl-1.32-bitnami-compat | 0 |
| Chainguard | kubectl-1.32-default | 0 |
| Chainguard | kubectl-bash-completion-1.28 | 0 |
| Chainguard | kubectl-bash-completion-1.29 | 0 |
| Chainguard | kubectl-bash-completion-1.30 | 0 |
| Chainguard | kubectl-bash-completion-1.31 | 0 |
| Chainguard | kubectl-bash-completion-1.32 | 0 |
| Chainguard | kubeflow-pipelines | 0 |
| Chainguard | kubeflow-pipelines-apiserver | 0 |
| Chainguard | kubeflow-pipelines-cache-deployer | 0 |
| Chainguard | kubeflow-pipelines-cache-deployer-compat | 0 |
| Chainguard | kubeflow-pipelines-cache_server | 0 |
| Chainguard | kubeflow-pipelines-frontend | 0 |
| Chainguard | kubeflow-pipelines-metadata-envoy-config | 0 |
| Chainguard | kubeflow-pipelines-metadata-writer | 0 |
| Chainguard | kubeflow-pipelines-metadata-writer-compat | 0 |
| Chainguard | kubeflow-pipelines-persistence_agent | 0 |
| Chainguard | kubeflow-pipelines-scheduledworkflow | 0 |
| Chainguard | kubeflow-pipelines-viewer-crd-controller | 0 |
| Chainguard | kubelet-1.28 | 0 |
| Chainguard | kubelet-1.28-default | 0 |
| Chainguard | kubelet-1.29 | 0 |
| Chainguard | kubelet-1.29-default | 0 |
| Chainguard | kubelet-1.30 | 0 |
| Chainguard | kubelet-1.30-default | 0 |
| Chainguard | kubelet-1.31 | 0 |
| Chainguard | kubelet-1.31-default | 0 |
| Chainguard | kubelet-1.32 | 0 |
| Chainguard | kubelet-1.32-default | 0 |
| Chainguard | kubernetes-1.28 | 0 |
| Chainguard | kubernetes-1.28-default | 0 |
| Chainguard | kubernetes-1.29 | 0 |
| Chainguard | kubernetes-1.29-default | 0 |
| Chainguard | kubernetes-1.30 | 0 |
| Chainguard | kubernetes-1.30-default | 0 |
| Chainguard | kubernetes-1.31 | 0 |
| Chainguard | kubernetes-1.31-default | 0 |
| Chainguard | kubernetes-1.32 | 0 |
| Chainguard | kubernetes-1.32-default | 0 |
| Chainguard | kubernetes-1.33 | no fix |
| Chainguard | kubernetes-1.34 | no fix |
| Chainguard | kubernetes-1.35 | no fix |
| Chainguard | kubernetes-1.36 | no fix |
| Chainguard | kubernetes-1.37 | no fix |
| Chainguard | kubernetes-dns-node-cache-1.17 | 0 |
| Chainguard | kubernetes-pause-1.28 | 0 |
| Chainguard | kubernetes-pause-1.29 | 0 |
| Chainguard | kubernetes-pause-1.30 | 0 |
| Chainguard | kubernetes-pause-1.31 | 0 |
| Chainguard | kubernetes-pause-1.32 | 0 |
| Chainguard | kubernetes-pause-compat-1.28 | 0 |
| Chainguard | kubernetes-pause-compat-1.29 | 0 |
| Chainguard | kubernetes-pause-compat-1.30 | 0 |
| Chainguard | kubernetes-pause-compat-1.31 | 0 |
| Chainguard | kubernetes-pause-compat-1.32 | 0 |
| Chainguard | nodetaint | 0 |
| Chainguard | spark-operator | 0 |
| Chainguard | spark-operator-oci-entrypoint | 0 |
| Chainguard | sparkctl | 0 |
| Debian:12 | kubernetes | 1.20.5+really1.20.2-1 |
| Debian:13 | kubernetes | 1.20.5+really1.20.2-1 |
| Debian:14 | kubernetes | 1.20.5+really1.20.2-1 |
| Ubuntu:22.04:LTS | kubernetes | no fix |
| Ubuntu:24.04:LTS | kubernetes | no fix |
| Ubuntu:Pro:20.04:LTS | kubernetes | no fix |
| Wolfi | kube-apiserver-1.32 | 0 |
| Wolfi | kube-apiserver-1.32-default | 0 |
| Wolfi | kube-controller-manager-1.32 | 0 |
| Wolfi | kube-controller-manager-1.32-default | 0 |
| Wolfi | kube-proxy-1.32 | 0 |
| Wolfi | kube-proxy-1.32-default | 0 |
| Wolfi | kube-proxy-1.32-default-compat | 0 |
| Wolfi | kube-scheduler-1.32 | 0 |
| Wolfi | kube-scheduler-1.32-default | 0 |
| Wolfi | kubeadm-1.32 | 0 |
| Wolfi | kubeadm-1.32-default | 0 |
| Wolfi | kubectl-1.32 | 0 |
| Wolfi | kubectl-1.32-bitnami-compat | 0 |
| Wolfi | kubectl-1.32-default | 0 |
| Wolfi | kubectl-bash-completion-1.32 | 0 |
| Wolfi | kubeflow-pipelines | 0 |
| Wolfi | kubeflow-pipelines-apiserver | 0 |
| Wolfi | kubeflow-pipelines-cache-deployer | 0 |
| Wolfi | kubeflow-pipelines-cache-deployer-compat | 0 |
| Wolfi | kubeflow-pipelines-cache_server | 0 |
| Wolfi | kubeflow-pipelines-frontend | 0 |
| Wolfi | kubeflow-pipelines-metadata-envoy-config | 0 |
| Wolfi | kubeflow-pipelines-metadata-writer | 0 |
| Wolfi | kubeflow-pipelines-metadata-writer-compat | 0 |
| Wolfi | kubeflow-pipelines-persistence_agent | 0 |
| Wolfi | kubeflow-pipelines-scheduledworkflow | 0 |
| Wolfi | kubeflow-pipelines-viewer-crd-controller | 0 |
| Wolfi | kubelet-1.32 | 0 |
| Wolfi | kubelet-1.32-default | 0 |
| Wolfi | kubernetes-1.32 | 0 |
| Wolfi | kubernetes-1.32-default | 0 |
| Wolfi | kubernetes-1.34 | no fix |
| Wolfi | kubernetes-1.35 | no fix |
| Wolfi | kubernetes-1.36 | no fix |
| Wolfi | kubernetes-1.37 | no fix |
| Wolfi | kubernetes-pause-1.32 | 0 |
| Wolfi | kubernetes-pause-compat-1.32 | 0 |
| Wolfi | nodetaint | 0 |
| Wolfi | spark-operator | 0 |
| Wolfi | spark-operator-oci-entrypoint | 0 |
| Wolfi | sparkctl | 0 |