Description
A security issue was discovered in Kubernetes where a user may be able to redirect pod traffic to private networks on a Node. Kubernetes already prevents creation of Endpoint IPs in the localhost or link-local range, but the same validation was not performed on EndpointSlice IPs.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Kubernetes Kubernetes
unspecified to ≤ 1.18.18affectedunspecified to ≤ 1.19.10affectedunspecified to ≤ 1.20.6affectedunspecified to ≤ 1.21.0affected