CVE-2020-10749: falha de média gravidade em Red Hat containernetworking/plugins
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6epss 2.1%
A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Produtos afetados
Red Hat · containernetworking/pluginsReferências
http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00063.htmlhttp://lists.opensuse.org/opensuse-security-announce/2020-07/msg00065.htmlhttps://bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10749https://groups.google.com/forum/#%21topic/kubernetes-security-announce/BMb_6ICCfp8https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DV3HCDZYUTPPVDUMTZXDKK6IUO3JMGJC/