A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python-podman-apiUpgrade libslirp-develUpgrade libslirp | May 13, 2022 | Jun 3, 2020 |
| Alpine Linux | — | Upgrade k3s | Aug 22, 2024 | Jun 3, 2020 |
| Centos_linux | — | Upgrade libslirp-debugsourceUpgrade python3-criuUpgrade slirp4netns-debugsourceUpgrade libslirp-debuginfoUpgrade container-selinuxUpgrade slirp4netns-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade python-podman-apiUpgrade crunUpgrade runc-debuginfoUpgrade libslirpUpgrade libslirp-develUpgrade critUpgrade containernetworking-plugins-debuginfoUpgrade buildah-debugsourceUpgrade podman-debuginfoUpgrade containers-commonUpgrade skopeo-testsUpgrade slirp4netnsUpgrade oci-seccomp-bpf-hookUpgrade crun-debuginfoUpgrade podman-remote-debuginfoUpgrade podman-debugsourceUpgrade crun-debugsourceUpgrade podman-catatonit-debuginfoUpgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade criu-debugsourceUpgrade podmanUpgrade buildahUpgrade criuUpgrade cockpit-podmanUpgrade skopeoUpgrade runc-debugsourceUpgrade criu-debuginfoUpgrade runcUpgrade conmonUpgrade buildah-testsUpgrade buildah-tests-debuginfoUpgrade podman-testsUpgrade podman-remoteUpgrade buildah-debuginfoUpgrade containernetworking-pluginsUpgrade podman-catatonitUpgrade skopeo-debugsourceUpgrade podman-dockerUpgrade fuse-overlayfsUpgrade toolboxUpgrade skopeo-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade udica | Jul 2, 2020 | Jun 3, 2020 |
| Debian | — | Upgrade golang-github-containernetworking-plugins | Jul 30, 2024 | Jun 3, 2020 |
| Oracle_linux | — | Upgrade podman-remoteUpgrade kubeadm-ha-setupUpgrade oci-seccomp-bpf-hookUpgrade buildahUpgrade olcne-nginxUpgrade cockpit-podmanUpgrade containernetworking-pluginsUpgrade grafanaUpgrade kubeletUpgrade container-selinuxUpgrade buildah-testsUpgrade runcUpgrade critUpgrade containers-commonUpgrade olcne-prometheus-chartUpgrade python-podman-apiUpgrade kubernetes-cni-pluginsUpgrade olcnectlUpgrade python3-criuUpgrade podman-dockerUpgrade skopeoUpgrade udicaUpgrade crunUpgrade olcne-agentUpgrade podman-testsUpgrade olcne-api-serverUpgrade fuse-overlayfsUpgrade criuUpgrade kubernetes-cniUpgrade podman-catatonitUpgrade olcne-istio-chartUpgrade libslirpUpgrade kubectlUpgrade skopeo-testsUpgrade conmonUpgrade libslirp-develUpgrade olcne-utilsUpgrade slirp4netnsUpgrade podmanUpgrade kubeadm | Jun 13, 2020 | Jun 1, 2020 |
| Redhat Openshift | — | Upgrade containernetworking-plugins | Dec 29, 2020 | Jun 1, 2020 |
| Redhat_linux | — | Upgrade slirp4netns-debugsourceUpgrade containernetworking-pluginsUpgrade podman-remoteUpgrade containers-commonUpgrade podman-dockerUpgrade python3-criuUpgrade criu-debugsourceUpgrade crun-debugsourceUpgrade podman-debuginfoUpgrade cockpit-podmanUpgrade runcUpgrade slirp4netns-debuginfoUpgrade runc-debuginfoUpgrade buildahUpgrade python-podman-apiUpgrade libslirp-debuginfoUpgrade podman-debugsourceUpgrade slirp4netnsUpgrade crun-debuginfoUpgrade critUpgrade container-selinuxUpgrade skopeo-testsUpgrade udicaUpgrade buildah-testsUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade skopeo-debuginfoUpgrade runc-debugsourceUpgrade libslirp-develUpgrade containernetworking-plugins-debuginfoUpgrade podman-testsUpgrade podman-catatonit-debuginfoUpgrade buildah-debuginfoUpgrade fuse-overlayfsUpgrade skopeoUpgrade fuse-overlayfs-debugsourceUpgrade buildah-tests-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade skopeo-debugsourceUpgrade conmonUpgrade podmanUpgrade criuUpgrade fuse-overlayfs-debuginfoUpgrade toolboxUpgrade podman-remote-debuginfoNo solution existsUpgrade crunUpgrade podman-catatonitUpgrade criu-debuginfoUpgrade libslirpUpgrade oci-seccomp-bpf-hook | Jul 2, 2020 | Jun 3, 2020 |
| Rocky_linux | — | Upgrade libslirpUpgrade libslirp-develUpgrade libslirp-debuginfoUpgrade libslirp-debugsource | Mar 12, 2024 | Jun 3, 2020 |
| Suse | — | Upgrade cni-plugins | Jul 24, 2020 | Jun 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub