CVE-2021-3499: Incorrect Authorization

June 8, 2021

A vulnerability was found in OVN Kubernetes in versions up to and including 0.3.0 where the Egress Firewall does not reliably apply firewall rules when there is multiple DNS rules. It could lead to potentially lose of confidentiality, integrity or availability of a service.

References

github.com/advisories/GHSA-57v4-m9jx-mh8r
github.com/ovn-org/ovn-kubernetes/pull/2169
nvd.nist.gov/vuln/detail/CVE-2021-3499

Detect and mitigate CVE-2021-3499 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →