GitHub Advisoryadvisory · Go

GHSA-fx6x-h9g4-56f8 containernetworking/plugins vulnerable to MitM attacks

MEDIUM Published 2022-05-24 Modified 2023-08-22 Official page ↗
Aliases
CVE-2020-10749
Ecosystem
Go
Packages
github.com/containernetworking/plugins
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Weaknesses
CWE-300
Reviewed
2023-07-13

Affected packages

• Go github.com/containernetworking/plugins: < 0.8.6 → fixed in 0.8.6

Description

A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.

Related

Alias · CVE (1)

  • CVE-2020-10749 A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in… vulnerability

Weakness · CWE (1)

  • CWE-300 Channel Accessible by Non-Endpoint weakness

References