A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python-podman-apiUpgrade libslirpUpgrade libslirp-devel | May 13, 2022 | Jun 3, 2020 |
| Alpine Linux | — | Upgrade k3s | Aug 22, 2024 | Jun 3, 2020 |
| Centos_linux | — | Upgrade criuUpgrade buildah-testsUpgrade conmonUpgrade containernetworking-pluginsUpgrade containernetworking-plugins-debugsourceUpgrade criu-debugsourceUpgrade fuse-overlayfs-debugsourceUpgrade buildahUpgrade cockpit-podmanUpgrade fuse-overlayfs-debuginfoUpgrade runc-debugsourceUpgrade podmanUpgrade podman-testsUpgrade toolboxUpgrade podman-remoteUpgrade skopeo-debuginfoUpgrade podman-catatonitUpgrade buildah-tests-debuginfoUpgrade buildah-debuginfoUpgrade fuse-overlayfsUpgrade runcUpgrade udicaUpgrade criu-debuginfoUpgrade skopeoUpgrade podman-catatonit-debuginfoUpgrade podman-dockerUpgrade skopeo-debugsourceUpgrade python-podman-apiUpgrade libslirpUpgrade slirp4netns-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade crun-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade slirp4netnsUpgrade slirp4netns-debuginfoUpgrade runc-debuginfoUpgrade libslirp-debuginfoUpgrade container-selinuxUpgrade containers-commonUpgrade skopeo-testsUpgrade containernetworking-plugins-debuginfoUpgrade python3-criuUpgrade buildah-debugsourceUpgrade crunUpgrade libslirp-develUpgrade podman-remote-debuginfoUpgrade podman-debugsourceUpgrade podman-debuginfoUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade crun-debuginfoUpgrade crit | Jul 2, 2020 | Jun 3, 2020 |
| Debian | — | Upgrade golang-github-containernetworking-plugins | Jul 30, 2024 | Jun 3, 2020 |
| Oracle_linux | — | Upgrade skopeo-testsUpgrade podman-testsUpgrade fuse-overlayfsUpgrade olcne-api-serverUpgrade skopeoUpgrade crunUpgrade podman-dockerUpgrade libslirp-develUpgrade olcne-agentUpgrade olcne-utilsUpgrade kubeadmUpgrade podmanUpgrade slirp4netnsUpgrade udicaUpgrade libslirpUpgrade olcne-istio-chartUpgrade conmonUpgrade kubernetes-cniUpgrade podman-catatonitUpgrade criuUpgrade kubectlUpgrade olcne-prometheus-chartUpgrade kubernetes-cni-pluginsUpgrade containers-commonUpgrade python3-criuUpgrade python-podman-apiUpgrade critUpgrade containernetworking-pluginsUpgrade kubeletUpgrade buildah-testsUpgrade olcne-nginxUpgrade cockpit-podmanUpgrade oci-seccomp-bpf-hookUpgrade container-selinuxUpgrade buildahUpgrade olcnectlUpgrade runcUpgrade podman-remoteUpgrade kubeadm-ha-setupUpgrade grafana | Jun 13, 2020 | Jun 1, 2020 |
| Redhat Openshift | — | Upgrade containernetworking-plugins | Dec 29, 2020 | Jun 1, 2020 |
| Redhat_linux | — | Upgrade criuUpgrade containernetworking-plugins-debugsourceUpgrade crunUpgrade podmanUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceNo solution existsUpgrade skopeoUpgrade podman-catatonitUpgrade oci-seccomp-bpf-hookUpgrade podman-testsUpgrade skopeo-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfsUpgrade buildah-debuginfoUpgrade libslirpUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade toolboxUpgrade conmonUpgrade buildah-debugsourceUpgrade criu-debuginfoUpgrade buildah-testsUpgrade runc-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade runcUpgrade runc-debuginfoUpgrade slirp4netns-debuginfoUpgrade slirp4netnsUpgrade podman-debugsourceUpgrade skopeo-debuginfoUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade criu-debugsourceUpgrade python-podman-apiUpgrade python3-criuUpgrade buildahUpgrade slirp4netns-debugsourceUpgrade containers-commonUpgrade udicaUpgrade critUpgrade libslirp-develUpgrade libslirp-debuginfoUpgrade crun-debuginfoUpgrade skopeo-testsUpgrade containernetworking-pluginsUpgrade crun-debugsourceUpgrade cockpit-podmanUpgrade container-selinuxUpgrade podman-debuginfoUpgrade podman-dockerUpgrade podman-remote | Jul 2, 2020 | Jun 3, 2020 |
| Rocky_linux | — | Upgrade libslirp-develUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade libslirp | Mar 12, 2024 | Jun 3, 2020 |
| Suse | — | Upgrade cni-plugins | Jul 24, 2020 | Jun 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub