**Fixed Versions**:
  - kube-apiserver v1.25.1
  - kube-apiserver v1.24.5
  - kube-apiserver v1.23.11
  - kube-apiserver v1.22.14

This vulnerability was reported by Nicolas Joly & Weinong Wang from Microsoft


**CVSS Rating:** Medium (5.1) [CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L](https://www.first.org/cvss/calculator/3.1#CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L)

## Changes by Kind

// (polynomials over GF(2)) modulo the irreducible polynomial x⁸ + x⁴ + x³ + x + 1. // Addition of these binary polynomials corresponds to binary xor. // Reducing mod poly corresponds to binary xor with poly every // time a 0x100 bit appears. const poly = 1<<8 | 1<<4 | 1<<3 | 1<<1 | 1<<0 // x⁸ + x⁴ + x³ + x + 1 // Powers of x mod poly in GF(2). var powx = [16]byte{ 0x01, 0x02, 0x04, 0x08, 0x10, 0x20, 0x40, 0x80, 0x1b, 0x36, 0x6c, 0xd8, 0xab, 0x4d, 0x9a, 0x2f, } // FIPS-197 Figure 7. S-box substitution...

hofu.yamaguchi.jp
hokkaido.jp
hokksund.no
hokuryu.hokkaido.jp
hokuto.hokkaido.jp
hokuto.yamanashi.jp
hol.no
holdings
hole.no
holiday
holmestrand.no
holtalen.no
holtålen.no
holy.jp
home-webserver.de
home.arpa
home.dyndns.org
homebuilt.aero
homedepot
homedns.org
homeftp.net
homeftp.org
homegoods
homeip.net
homelinux.com
homelinux.net

hofu.yamaguchi.jp
hokkaido.jp
hokksund.no
hokuryu.hokkaido.jp
hokuto.hokkaido.jp
hokuto.yamanashi.jp
hol.no
holdings
hole.no
holiday
holmestrand.no
holtalen.no
holtålen.no
holy.jp
home-webserver.de
home.arpa
home.dyndns.org
homebuilt.aero
homedepot
homedns.org
homeftp.net
homeftp.org
homegoods
homeip.net
homelinux.com
homelinux.net

fem.jp
flier.jp
floppy.jp
fool.jp
frenchkiss.jp
girlfriend.jp
girly.jp
gloomy.jp
gonna.jp
greater.jp
hacca.jp
heavy.jp
her.jp
hiho.jp
hippy.jp
holy.jp
hungry.jp
icurus.jp
itigo.jp
jellybean.jp
kikirara.jp
kill.jp
kilo.jp
kuron.jp
littlestar.jp
lolipopmc.jp
lolitapunk.jp
lomo.jp
lovepop.jp