CVE-2020-10749
Description
A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.
Risk Information
Base Score
6.0
MODERATE
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
EPSS Score
Exploitation Probability
5.187
Associated Vulnerability
| Vulnerability | OS Platform |
|---|---|
| (RHSA-2020:2684) containernetworking-plugins security update containernetworking-plugins-0.8.3-3.el7_8.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update buildah-1.15.1-2.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update buildah-debugsource-1.15.1-2.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update buildah-tests-1.15.1-2.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update cockpit-podman-18.1-2.module+el8.3.0+8221+97165c3f.noarch.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update conmon-2.0.20-2.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update container-selinux-2.144.0-1.module+el8.3.0+8221+97165c3f.noarch.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update containernetworking-plugins-0.8.6-2.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update containernetworking-plugins-debugsource-0.8.6-2.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update containers-common-1.1.1-3.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update crit-3.14-2.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update criu-3.14-2.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update criu-debugsource-3.14-2.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update crun-0.14.1-2.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update crun-debugsource-0.14.1-2.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update fuse-overlayfs-1.1.2-3.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update fuse-overlayfs-debugsource-1.1.2-3.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update libslirp-4.3.1-1.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update libslirp-debugsource-4.3.1-1.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update libslirp-devel-4.3.1-1.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update oci-seccomp-bpf-hook-1.1.2-3.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update oci-seccomp-bpf-hook-debugsource-1.1.2-3.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update podman-2.0.5-5.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update podman-catatonit-2.0.5-5.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update podman-debugsource-2.0.5-5.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update podman-docker-2.0.5-5.module+el8.3.0+8221+97165c3f.noarch.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update podman-remote-2.0.5-5.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update podman-tests-2.0.5-5.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update python-podman-api-1.2.0-0.2.gitd0a45fe.module+el8.3.0+8221+97165c3f.noarch.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update python3-criu-3.14-2.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update runc-1.0.0-68.rc92.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update runc-debugsource-1.0.0-68.rc92.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update skopeo-1.1.1-3.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update skopeo-debugsource-1.1.1-3.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update skopeo-tests-1.1.1-3.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update slirp4netns-1.1.4-2.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update slirp4netns-debugsource-1.1.4-2.module+el8.3.0+8221+97165c3f.x86_64.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update toolbox-0.0.8-1.module+el8.3.0+8221+97165c3f.noarch.rpm | Linux |
| (RHSA-2020:4694) container-tools:rhel8 security, bug fix, and enhancement update udica-0.2.2-1.module+el8.3.0+8221+97165c3f.noarch.rpm | Linux |
| (RHSA-2020:2684)Moderate: security update containernetworking-plugins-debuginfo-0.8.3-3.el7_8.x86_64.rpm | Linux |
Patch Details
No records foundReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234