CVE-2021-3499

CVE-2021-3499 describes a vulnerability in OVN Kubernetes versions up to and including 0.3.0, where the Egress Firewall fails to consistently apply firewall rules when multiple DNS rules are configured. This flaw could lead to a loss of confidentiality, integrity, or availability for affected services. The vulnerability has a CVSS score of 5.6 (Medium), indicating a network-based attack with high attack complexity and low impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. The CVE has received minimal community discussion and media coverage, suggesting low public awareness.