GHSA-57v4-m9jx-mh8r
Suggest an improvement- Source
- https://github.com/advisories/GHSA-57v4-m9jx-mh8r
- Import Source
- https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/06/GHSA-57v4-m9jx-mh8r/GHSA-57v4-m9jx-mh8r.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/GHSA-57v4-m9jx-mh8r
- Aliases
- Published
- 2021-06-08T23:05:19Z
- Modified
- 2023-11-01T04:55:40.042124Z
- Severity
-
- 5.6 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS Calculator
- Summary
- Improper Input Validation
- Details
-
A vulnerability was found in OVN Kubernetes in versions up to and including 0.3.0 where the Egress Firewall does not reliably apply firewall rules when there is multiple DNS rules. It could lead to potentially lose of confidentiality, integrity or availability of a service
- Database specific
{ "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2021-05-28T21:24:52Z", "nvd_published_at": "2021-06-02T16:15:00Z", "cwe_ids": [ "CWE-863" ] }- References
Affected packages
Go / github.com/ovn-org/ovn-kubernetes
Package
- Name
- github.com/ovn-org/ovn-kubernetes
- View open source insights on deps.dev
- Purl
- pkg:golang/github.com/ovn-org/ovn-kubernetes