Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2020-10749

Опубликовано: 03 июн. 2020
Источник: ubuntu
Приоритет: medium
CVSS2: 6
CVSS3: 6

Описание

A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.

РелизСтатусПримечание
bionic

DNE

devel

not-affected

0.8.6-1
eoan

DNE

esm-apps/focal

needs-triage

esm-apps/jammy

not-affected

0.8.6-1
esm-apps/noble

not-affected

0.8.6-1
esm-infra-legacy/trusty

DNE

focal

ignored

end of standard support, was needs-triage
groovy

not-affected

0.8.6-1
hirsute

not-affected

0.8.6-1

Показывать по

6 Medium

CVSS2

6 Medium

CVSS3

Связанные уязвимости

CVSS3: 6
redhat
около 5 лет назад

A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.

CVSS3: 6
nvd
около 5 лет назад

A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.

CVSS3: 6
debian
около 5 лет назад

A vulnerability was found in all versions of containernetworking/plugi ...

suse-cvrf
почти 5 лет назад

Security update for cni-plugins

suse-cvrf
почти 5 лет назад

Security update for cni-plugins

6 Medium

CVSS2

6 Medium

CVSS3