A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.
CVSS Details
- CVSS 3.1 Base Score: 6
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libslirp-develUpgrade libslirpUpgrade python-podman-api | May 13, 2022 | Jun 3, 2020 |
| Alpine Linux | — | Upgrade k3s | Aug 22, 2024 | Jun 3, 2020 |
| Centos_linux | — | Upgrade fuse-overlayfs-debuginfoUpgrade containernetworking-plugins-debugsourceUpgrade criu-debugsourceUpgrade criu-debuginfoUpgrade fuse-overlayfs-debugsourceUpgrade podman-catatonit-debuginfoUpgrade podmanUpgrade buildahUpgrade buildah-tests-debuginfoUpgrade skopeoUpgrade cockpit-podmanUpgrade buildah-testsUpgrade podman-testsUpgrade containernetworking-pluginsUpgrade skopeo-debugsourceUpgrade podman-catatonitUpgrade podman-dockerUpgrade fuse-overlayfsUpgrade udicaUpgrade podman-remoteUpgrade runcUpgrade toolboxUpgrade conmonUpgrade buildah-debuginfoUpgrade criuUpgrade skopeo-debuginfoUpgrade runc-debugsourceUpgrade libslirpUpgrade containernetworking-plugins-debuginfoUpgrade buildah-debugsourceUpgrade crunUpgrade podman-debuginfoUpgrade crun-debugsourceUpgrade podman-debugsourceUpgrade crun-debuginfoUpgrade slirp4netnsUpgrade containers-commonUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade python-podman-apiUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade libslirp-debuginfoUpgrade slirp4netns-debugsourceUpgrade container-selinuxUpgrade runc-debuginfoUpgrade slirp4netns-debuginfoUpgrade podman-remote-debuginfoUpgrade libslirp-develUpgrade critUpgrade libslirp-debugsourceUpgrade python3-criuUpgrade oci-seccomp-bpf-hook-debugsource | Jul 2, 2020 | Jun 3, 2020 |
| Debian | — | Upgrade golang-github-containernetworking-plugins | Jul 30, 2024 | Jun 3, 2020 |
| Oracle_linux | — | Upgrade critUpgrade containernetworking-pluginsUpgrade buildah-testsUpgrade container-selinuxUpgrade cockpit-podmanUpgrade olcne-nginxUpgrade podman-remoteUpgrade python3-criuUpgrade containers-commonUpgrade python-podman-apiUpgrade kubernetes-cni-pluginsUpgrade oci-seccomp-bpf-hookUpgrade kubeletUpgrade runcUpgrade olcne-prometheus-chartUpgrade olcnectlUpgrade buildahUpgrade grafanaUpgrade kubeadm-ha-setupUpgrade kubernetes-cniUpgrade slirp4netnsUpgrade podman-testsUpgrade olcne-utilsUpgrade kubeadmUpgrade podman-catatonitUpgrade skopeoUpgrade fuse-overlayfsUpgrade olcne-api-serverUpgrade olcne-agentUpgrade crunUpgrade criuUpgrade libslirp-develUpgrade podmanUpgrade libslirpUpgrade kubectlUpgrade conmonUpgrade skopeo-testsUpgrade olcne-istio-chartUpgrade udicaUpgrade podman-docker | Jun 13, 2020 | Jun 1, 2020 |
| Redhat Openshift | — | Upgrade containernetworking-plugins | Dec 29, 2020 | Jun 1, 2020 |
| Redhat_linux | — | Upgrade oci-seccomp-bpf-hookUpgrade podmanUpgrade buildah-tests-debuginfoUpgrade podman-testsUpgrade criu-debuginfoUpgrade libslirpUpgrade skopeo-debugsourceUpgrade podman-catatonitUpgrade buildah-debugsourceUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade criuUpgrade toolboxUpgrade podman-catatonit-debuginfoUpgrade skopeoUpgrade fuse-overlayfs-debugsourceNo solution existsUpgrade fuse-overlayfsUpgrade fuse-overlayfs-debuginfoUpgrade conmonUpgrade crunUpgrade podman-remote-debuginfoUpgrade crun-debuginfoUpgrade crun-debugsourceUpgrade podman-dockerUpgrade slirp4netns-debuginfoUpgrade python3-criuUpgrade python-podman-apiUpgrade runc-debuginfoUpgrade libslirp-develUpgrade runc-debugsourceUpgrade buildahUpgrade containers-commonUpgrade slirp4netns-debugsourceUpgrade critUpgrade podman-debugsourceUpgrade udicaUpgrade skopeo-testsUpgrade criu-debugsourceUpgrade podman-debuginfoUpgrade container-selinuxUpgrade cockpit-podmanUpgrade libslirp-debuginfoUpgrade containernetworking-pluginsUpgrade runcUpgrade containernetworking-plugins-debuginfoUpgrade buildah-testsUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netnsUpgrade libslirp-debugsourceUpgrade skopeo-debuginfoUpgrade podman-remote | Jul 2, 2020 | Jun 3, 2020 |
| Rocky_linux | — | Upgrade libslirp-develUpgrade libslirp-debuginfoUpgrade libslirp-debugsourceUpgrade libslirp | Mar 12, 2024 | Jun 3, 2020 |
| Suse | — | Upgrade cni-plugins | Jul 24, 2020 | Jun 3, 2020 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub