Input validation error in Kubernetes - CVE-2021-25743

Vulnerability identifier: #VU79792

CSH Severity: Medium

CVSS v4: 8.7 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-25743

CWE-ID: CWE-20

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.

The vulnerability exists due to insufficient validation of user-supplied input. A remote attacker can pass specially crafted input to the application and perform a denial of service (DoS) attack.

Kubernetes
SUSE Linux Enterprise Server 15 SP4
SUSE Linux Enterprise Server 15 SP3
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise High Performance Computing 15
SUSE Linux Enterprise High Performance Computing LTSS 15
SUSE Linux Enterprise High Performance Computing ESPOS 15
SUSE Linux Enterprise Real Time 15
SUSE Enterprise Storage
SUSE Linux Enterprise Server 15 SP3 LTSS
SUSE Linux Enterprise Server 15 SP4 LTSS
Containers Module
openSUSE Leap
openEuler
Fedora
kubernetes
kubernetes-node
kubernetes-kubeadm
kubernetes-client
kubernetes-kubelet
kubernetes-help
kubernetes-master
kubernetes1.23-client-debuginfo
kubernetes1.23-client
kubernetes1.23-client-common
kubernetes1.23-controller-manager-debuginfo
kubernetes1.23-proxy-debuginfo
kubernetes1.23-kubelet-debuginfo
kubernetes1.23-scheduler-debuginfo
kubernetes1.23-apiserver-debuginfo
kubernetes1.23-kubeadm-debuginfo
kubernetes1.23-client-bash-completion
kubernetes1.23-client-fish-completion
kubernetes1.23-kubelet-common
kubernetes1.23-kubeadm
kubernetes1.23-controller-manager
kubernetes1.23-apiserver
kubernetes1.23-scheduler
kubernetes1.23-proxy
kubernetes1.23-kubelet
kubernetes1.24-scheduler
kubernetes1.24-proxy
kubernetes1.24-kubeadm
kubernetes1.24-client-common
kubernetes1.24-kubelet-common
kubernetes1.24-client
kubernetes1.24-controller-manager
kubernetes1.24-apiserver
kubernetes1.24-client-fish-completion
kubernetes1.24-client-bash-completion
kubernetes1.24-kubelet
kubernetes1.25-client-fish-completion
kubernetes1.25-apiserver
kubernetes1.25-kubelet
kubernetes1.25-proxy
kubernetes1.25-controller-manager
kubernetes1.25-kubeadm
kubernetes1.25-kubelet-common
kubernetes1.25-client
kubernetes1.25-client-common
kubernetes1.25-scheduler
kubernetes1.25-client-bash-completion
IBM Cloud Pak for Watson AIOps
App Connect Enterprise Certified Container
IBM InfoSphere Information Server

Install updates from vendor's website.

kubernetes - addressed in versions 1.20.2-15, 1.20.2-16
kubernetes-node - addressed in versions 1.20.2-15, 1.20.2-16
kubernetes-kubeadm - addressed in versions 1.20.2-15, 1.20.2-16
kubernetes-client - addressed in versions 1.20.2-15, 1.20.2-16
kubernetes-kubelet - addressed in versions 1.20.2-15, 1.20.2-16
kubernetes-help - addressed in versions 1.20.2-15, 1.20.2-16
kubernetes-master - addressed in versions 1.20.2-15, 1.20.2-16
kubernetes1.23-client-debuginfo - addressed in versions 1.23.17-150300.7.12.1, 1.23.17-150500.3.15.1
kubernetes1.23-client - addressed in versions 1.23.17-150300.7.12.1, 1.23.17-150500.3.15.1
kubernetes1.23-client-common - addressed in versions 1.23.17-150300.7.12.1, 1.23.17-150500.3.15.1
kubernetes1.23-controller-manager-debuginfo - update to 1.23.17-150500.3.15.1
kubernetes1.23-proxy-debuginfo - update to 1.23.17-150500.3.15.1
kubernetes1.23-kubelet-debuginfo - update to 1.23.17-150500.3.15.1
kubernetes1.23-scheduler-debuginfo - update to 1.23.17-150500.3.15.1
kubernetes1.23-apiserver-debuginfo - update to 1.23.17-150500.3.15.1
kubernetes1.23-kubeadm-debuginfo - update to 1.23.17-150500.3.15.1
kubernetes1.23-client-bash-completion - update to 1.23.17-150500.3.15.1
kubernetes1.23-client-fish-completion - update to 1.23.17-150500.3.15.1
kubernetes1.23-kubelet-common - update to 1.23.17-150500.3.15.1
kubernetes1.23-kubeadm - update to 1.23.17-150500.3.15.1
kubernetes1.23-controller-manager - update to 1.23.17-150500.3.15.1
kubernetes1.23-apiserver - update to 1.23.17-150500.3.15.1
kubernetes1.23-scheduler - update to 1.23.17-150500.3.15.1
kubernetes1.23-proxy - update to 1.23.17-150500.3.15.1
kubernetes1.23-kubelet - update to 1.23.17-150500.3.15.1
kubernetes1.24-scheduler - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.19.1
kubernetes1.24-proxy - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.19.1
kubernetes1.24-kubeadm - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.19.1
kubernetes1.24-client-common - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.19.1
kubernetes1.24-kubelet-common - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.19.1
kubernetes1.24-client - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.19.1
kubernetes1.24-controller-manager - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.19.1
kubernetes1.24-apiserver - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.19.1
kubernetes1.24-client-fish-completion - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.19.1
kubernetes1.24-client-bash-completion - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.19.1
kubernetes1.24-kubelet - addressed in versions 1.24.17-150300.7.6.1, 1.24.17-150400.9.16.1, 1.24.17-150500.3.19.1
kubernetes - update to 1.25.11-1.fc37
kubernetes1.25-client-fish-completion - update to 1.25.16-150400.9.10.1
kubernetes1.25-apiserver - update to 1.25.16-150400.9.10.1
kubernetes1.25-kubelet - update to 1.25.16-150400.9.10.1
kubernetes1.25-proxy - update to 1.25.16-150400.9.10.1
kubernetes1.25-controller-manager - update to 1.25.16-150400.9.10.1
kubernetes1.25-kubeadm - update to 1.25.16-150400.9.10.1
kubernetes1.25-kubelet-common - update to 1.25.16-150400.9.10.1
kubernetes1.25-client - update to 1.25.16-150400.9.10.1
kubernetes1.25-client-common - update to 1.25.16-150400.9.10.1
kubernetes1.25-scheduler - update to 1.25.16-150400.9.10.1
kubernetes1.25-client-bash-completion - update to 1.25.16-150400.9.10.1
IBM Cloud Pak for Watson AIOps - update to 4.8.1
App Connect Enterprise Certified Container - addressed in versions 5.0.3, 7.1.0
IBM InfoSphere Information Server - update to 11.7.1 Fix Pack 5

• https://github.com/kubernetes/kubernetes/issues/101695
• https://security.netapp.com/advisory/ntap-20220217-0003/

• Denial of service in Kubernetes
• Fedora 37 update for kubernetes
• Input validation error in IBM App Connect Enterprise Certified Container
• openEuler update for kubernetes
• openEuler 22.03 LTS SP1 update for kubernetes
• Multiple vulnerabilities in IBM InfoSphere Information Server
• SUSE update for kubernetes1.23
• SUSE update for kubernetes1.24
• SUSE update for kubernetes1.25
• SUSE update for kubernetes1.23
• SUSE update for kubernetes1.24
• Multiple vulnerabilities in IBM Cloud Pak for AIOps
• SUSE update for kubernetes1.23