The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libslirp-develUpgrade python-podman-apiUpgrade libslirp | May 13, 2022 | Jun 3, 2020 |
| Alpine Linux | — | Upgrade k3s | Aug 22, 2024 | Jun 3, 2020 |
| Centos_linux | — | Upgrade podman-dockerUpgrade buildah-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonit-debuginfoUpgrade skopeo-debuginfoUpgrade udicaUpgrade fuse-overlayfsUpgrade skopeo-debugsourceUpgrade toolboxUpgrade podman-testsUpgrade podman-remoteUpgrade podman-catatonitUpgrade conmonUpgrade containernetworking-pluginsUpgrade runcUpgrade podmanUpgrade buildah-tests-debuginfoUpgrade skopeoUpgrade criu-debuginfoUpgrade criu-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade criuUpgrade buildah-testsUpgrade buildahUpgrade runc-debugsourceUpgrade cockpit-podmanUpgrade containernetworking-plugins-debuginfoUpgrade container-selinuxUpgrade slirp4netns-debugsourceUpgrade buildah-debugsourceUpgrade libslirp-develUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debugsourceUpgrade python-podman-apiUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-debugsourceUpgrade slirp4netnsUpgrade crun-debuginfoUpgrade critUpgrade podman-debuginfoUpgrade crunUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade runc-debuginfoUpgrade skopeo-testsUpgrade containers-commonUpgrade libslirp-debugsourceUpgrade python3-criuUpgrade libslirp-debuginfo | Jul 2, 2020 | Jun 3, 2020 |
| Debian | — | Upgrade golang-github-containernetworking-plugins | Jul 30, 2024 | Jun 3, 2020 |
| Oracle_linux | — | Upgrade container-selinuxUpgrade buildahUpgrade cockpit-podmanUpgrade oci-seccomp-bpf-hookUpgrade kubeletUpgrade kubernetes-cni-pluginsUpgrade buildah-testsUpgrade olcnectlUpgrade containernetworking-pluginsUpgrade critUpgrade kubeadm-ha-setupUpgrade podman-remoteUpgrade olcne-nginxUpgrade olcne-prometheus-chartUpgrade python3-criuUpgrade runcUpgrade python-podman-apiUpgrade grafanaUpgrade containers-commonUpgrade slirp4netnsUpgrade podmanUpgrade podman-testsUpgrade kubectlUpgrade conmonUpgrade criuUpgrade skopeo-testsUpgrade olcne-istio-chartUpgrade libslirpUpgrade crunUpgrade udicaUpgrade podman-dockerUpgrade olcne-utilsUpgrade libslirp-develUpgrade skopeoUpgrade kubernetes-cniUpgrade olcne-api-serverUpgrade olcne-agentUpgrade podman-catatonitUpgrade fuse-overlayfsUpgrade kubeadm | Jun 13, 2020 | Jun 1, 2020 |
| Redhat Openshift | — | Upgrade containernetworking-plugins | Dec 29, 2020 | Jun 1, 2020 |
| Redhat_linux | — | Upgrade slirp4netnsUpgrade runcUpgrade runc-debugsourceUpgrade podman-debuginfoUpgrade podman-remoteUpgrade crun-debuginfoUpgrade buildahUpgrade containernetworking-plugins-debuginfoUpgrade podman-dockerUpgrade skopeo-testsUpgrade libslirp-develUpgrade slirp4netns-debugsourceUpgrade critUpgrade container-selinuxUpgrade slirp4netns-debuginfoUpgrade podman-debugsourceUpgrade skopeo-debuginfoUpgrade libslirp-debuginfoUpgrade containernetworking-pluginsUpgrade runc-debuginfoUpgrade python3-criuUpgrade crun-debugsourceUpgrade cockpit-podmanUpgrade containers-commonUpgrade udicaUpgrade python-podman-apiUpgrade criu-debugsourceUpgrade buildah-testsUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade buildah-tests-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceNo solution existsUpgrade skopeo-debugsourceUpgrade toolboxUpgrade libslirpUpgrade conmonUpgrade podman-remote-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade crunUpgrade criuUpgrade fuse-overlayfsUpgrade criu-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-testsUpgrade podmanUpgrade podman-catatonitUpgrade skopeoUpgrade oci-seccomp-bpf-hookUpgrade podman-catatonit-debuginfoUpgrade buildah-debuginfoUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debugsource | Jul 2, 2020 | Jun 3, 2020 |
| Rocky_linux | — | Upgrade libslirpUpgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade libslirp-devel | Mar 12, 2024 | Jun 3, 2020 |
| Suse | — | Upgrade cni-plugins | Jul 24, 2020 | Jun 3, 2020 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub