A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libslirp-develUpgrade libslirpUpgrade python-podman-api | May 13, 2022 | Jun 3, 2020 |
| Alpine Linux | — | Upgrade k3s | Aug 22, 2024 | Jun 3, 2020 |
| Centos_linux | — | Upgrade libslirpUpgrade libslirp-develUpgrade containernetworking-plugins-debuginfoUpgrade buildah-debugsourceUpgrade crun-debugsourceUpgrade crunUpgrade runc-debuginfoUpgrade python-podman-apiUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade skopeo-testsUpgrade crun-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade slirp4netnsUpgrade slirp4netns-debugsourceUpgrade container-selinuxUpgrade containers-commonUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-debuginfoUpgrade podman-debugsourceUpgrade python3-criuUpgrade podman-remote-debuginfoUpgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade critUpgrade slirp4netns-debuginfoUpgrade runcUpgrade runc-debugsourceUpgrade podman-remoteUpgrade podman-testsUpgrade podman-catatonitUpgrade criu-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade criu-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade buildah-testsUpgrade conmonUpgrade containernetworking-pluginsUpgrade fuse-overlayfs-debuginfoUpgrade podmanUpgrade podman-catatonit-debuginfoUpgrade udicaUpgrade podman-dockerUpgrade skopeo-debuginfoUpgrade fuse-overlayfsUpgrade skopeo-debugsourceUpgrade buildahUpgrade buildah-tests-debuginfoUpgrade skopeoUpgrade criuUpgrade cockpit-podmanUpgrade toolboxUpgrade buildah-debuginfo | Jul 2, 2020 | Jun 3, 2020 |
| Debian | — | Upgrade golang-github-containernetworking-plugins | Jul 30, 2024 | Jun 3, 2020 |
| Oracle_linux | — | Upgrade skopeo-testsUpgrade olcne-api-serverUpgrade criuUpgrade podmanUpgrade slirp4netnsUpgrade crunUpgrade podman-catatonitUpgrade olcne-utilsUpgrade kubernetes-cniUpgrade podman-dockerUpgrade olcne-istio-chartUpgrade kubectlUpgrade skopeoUpgrade udicaUpgrade olcne-agentUpgrade podman-testsUpgrade kubeadmUpgrade conmonUpgrade libslirpUpgrade libslirp-develUpgrade fuse-overlayfsUpgrade olcnectlUpgrade container-selinuxUpgrade buildahUpgrade cockpit-podmanUpgrade kubeletUpgrade containernetworking-pluginsUpgrade critUpgrade buildah-testsUpgrade kubernetes-cni-pluginsUpgrade containers-commonUpgrade runcUpgrade python3-criuUpgrade olcne-prometheus-chartUpgrade podman-remoteUpgrade kubeadm-ha-setupUpgrade olcne-nginxUpgrade python-podman-apiUpgrade grafanaUpgrade oci-seccomp-bpf-hook | Jun 13, 2020 | Jun 1, 2020 |
| Redhat Openshift | — | Upgrade containernetworking-plugins | Dec 29, 2020 | Jun 1, 2020 |
| Redhat_linux | — | Upgrade podman-catatonitUpgrade skopeo-debugsourceUpgrade criu-debuginfoUpgrade toolboxUpgrade libslirpUpgrade oci-seccomp-bpf-hookUpgrade criuUpgrade fuse-overlayfs-debuginfoUpgrade crunNo solution existsUpgrade podman-remote-debuginfoUpgrade buildah-tests-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade conmonUpgrade fuse-overlayfs-debugsourceUpgrade fuse-overlayfsUpgrade podman-catatonit-debuginfoUpgrade podman-testsUpgrade buildah-debugsourceUpgrade podmanUpgrade buildah-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade skopeoUpgrade podman-remoteUpgrade critUpgrade container-selinuxUpgrade python3-criuUpgrade containers-commonUpgrade skopeo-testsUpgrade podman-dockerUpgrade crun-debugsourceUpgrade libslirp-debuginfoUpgrade containernetworking-pluginsUpgrade skopeo-debuginfoUpgrade udicaUpgrade cockpit-podmanUpgrade podman-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade runcUpgrade buildah-testsUpgrade libslirp-debugsourceUpgrade slirp4netns-debuginfoUpgrade crun-debuginfoUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netnsUpgrade libslirp-develUpgrade buildahUpgrade runc-debugsourceUpgrade python-podman-apiUpgrade criu-debugsourceUpgrade runc-debuginfoUpgrade slirp4netns-debugsource | Jul 2, 2020 | Jun 3, 2020 |
| Rocky_linux | — | Upgrade libslirpUpgrade libslirp-debugsourceUpgrade libslirp-develUpgrade libslirp-debuginfo | Mar 12, 2024 | Jun 3, 2020 |
| Suse | — | Upgrade cni-plugins | Jul 24, 2020 | Jun 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub