CVE-2021-3499: Medium severity ovn OVN-Kubernetes vulnerability
A vulnerability was found in OVN Kubernetes in versions up to and including 0.3.0 where the Egress Firewall does not reliably apply firewall rules when there is multiple DNS rules. It could lead to potentially lose of confidentiality, integrity or availability of a service.
Other sources
It was found that Egress Firewall in OVN-Kubernetes does not reliably apply firewall rules when there is multiple dns rules. When adding EgressFirewalls with 5 or so dnsNames it is probable that a deadlock will occur. It could lead to the situation that effective firewall rules are different than it could be expected.
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this OVN Kubernetes vulnerability?
The vulnerability ID for this OVN Kubernetes vulnerability is CVE-2021-3499.
What is the title of this OVN Kubernetes vulnerability?
The title of this OVN Kubernetes vulnerability is 'A vulnerability was found in OVN Kubernetes in versions up to and including 0.3.0 where the Egress Firewall does not reliably apply firewall rules when there is multiple DNS rules.'
What is the severity of CVE-2021-3499?
The severity of CVE-2021-3499 is medium with a CVSS score of 5.6.
How does the vulnerability in OVN Kubernetes affect confidentiality, integrity, or availability of a service?
The vulnerability in OVN Kubernetes could potentially lead to a loss of confidentiality, integrity, or availability of a service.
How do I fix the OVN Kubernetes vulnerability identified as CVE-2021-3499?
To fix the OVN Kubernetes vulnerability CVE-2021-3499, update to a version higher than 0.3.0.