A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python-podman-apiUpgrade libslirpUpgrade libslirp-devel | May 13, 2022 | Jun 3, 2020 |
| Alpine Linux | — | Upgrade k3s | Aug 22, 2024 | Jun 3, 2020 |
| Centos_linux | — | Upgrade python3-criuUpgrade slirp4netns-debugsourceUpgrade container-selinuxUpgrade libslirp-debugsourceUpgrade libslirp-debuginfoUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debuginfoUpgrade crun-debuginfoUpgrade slirp4netnsUpgrade libslirp-develUpgrade podman-debuginfoUpgrade runc-debuginfoUpgrade podman-remote-debuginfoUpgrade python-podman-apiUpgrade crun-debugsourceUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade containers-commonUpgrade podman-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade libslirpUpgrade critUpgrade crunUpgrade podmanUpgrade criu-debugsourceUpgrade cockpit-podmanUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade buildahUpgrade runcUpgrade skopeo-debuginfoUpgrade fuse-overlayfsUpgrade conmonUpgrade buildah-testsUpgrade containernetworking-plugins-debugsourceUpgrade fuse-overlayfs-debuginfoUpgrade podman-catatonit-debuginfoUpgrade criuUpgrade podman-catatonitUpgrade containernetworking-pluginsUpgrade buildah-debuginfoUpgrade toolboxUpgrade podman-testsUpgrade runc-debugsourceUpgrade criu-debuginfoUpgrade podman-remoteUpgrade udicaUpgrade skopeoUpgrade skopeo-debugsourceUpgrade podman-docker | Jul 2, 2020 | Jun 3, 2020 |
| Debian | — | Upgrade golang-github-containernetworking-plugins | Jul 30, 2024 | Jun 3, 2020 |
| Oracle_linux | — | Upgrade olcne-nginxUpgrade containernetworking-pluginsUpgrade buildahUpgrade critUpgrade container-selinuxUpgrade runcUpgrade buildah-testsUpgrade kubeletUpgrade oci-seccomp-bpf-hookUpgrade podman-remoteUpgrade kubeadm-ha-setupUpgrade python-podman-apiUpgrade grafanaUpgrade python3-criuUpgrade olcne-prometheus-chartUpgrade containers-commonUpgrade cockpit-podmanUpgrade kubernetes-cni-pluginsUpgrade olcnectlUpgrade kubernetes-cniUpgrade skopeo-testsUpgrade podman-catatonitUpgrade kubectlUpgrade olcne-agentUpgrade podman-testsUpgrade skopeoUpgrade fuse-overlayfsUpgrade olcne-api-serverUpgrade criuUpgrade libslirp-develUpgrade udicaUpgrade podman-dockerUpgrade olcne-utilsUpgrade podmanUpgrade slirp4netnsUpgrade kubeadmUpgrade crunUpgrade conmonUpgrade olcne-istio-chartUpgrade libslirp | Jun 13, 2020 | Jun 1, 2020 |
| Redhat Openshift | — | Upgrade containernetworking-plugins | Dec 29, 2020 | Jun 1, 2020 |
| Redhat_linux | — | Upgrade criuUpgrade crunUpgrade fuse-overlayfs-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade toolboxUpgrade fuse-overlayfs-debugsourceUpgrade libslirpUpgrade podman-remote-debuginfoUpgrade conmonUpgrade criu-debuginfoNo solution existsUpgrade podman-testsUpgrade containernetworking-plugins-debugsourceUpgrade buildah-debuginfoUpgrade skopeo-debugsourceUpgrade fuse-overlayfsUpgrade buildah-debugsourceUpgrade oci-seccomp-bpf-hookUpgrade skopeoUpgrade buildah-tests-debuginfoUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade podman-catatonitUpgrade buildahUpgrade slirp4netnsUpgrade podman-dockerUpgrade libslirp-develUpgrade python3-criuUpgrade container-selinuxUpgrade podman-debuginfoUpgrade runc-debuginfoUpgrade podman-debugsourceUpgrade skopeo-testsUpgrade skopeo-debuginfoUpgrade slirp4netns-debuginfoUpgrade libslirp-debugsourceUpgrade python-podman-apiUpgrade slirp4netns-debugsourceUpgrade podman-remoteUpgrade containers-commonUpgrade criu-debugsourceUpgrade containernetworking-pluginsUpgrade cockpit-podmanUpgrade crun-debugsourceUpgrade libslirp-debuginfoUpgrade crun-debuginfoUpgrade runcUpgrade containernetworking-plugins-debuginfoUpgrade buildah-testsUpgrade runc-debugsourceUpgrade udicaUpgrade critUpgrade oci-seccomp-bpf-hook-debuginfo | Jul 2, 2020 | Jun 3, 2020 |
| Rocky_linux | — | Upgrade libslirp-debuginfoUpgrade libslirp-develUpgrade libslirp-debugsourceUpgrade libslirp | Mar 12, 2024 | Jun 3, 2020 |
| Suse | — | Upgrade cni-plugins | Jul 24, 2020 | Jun 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub