Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2019-9946
HistoryApr 02, 2019 - 6:30 p.m.

CVE-2019-9946

2019-04-0218:30:26
Debian Security Bug Tracker
security-tracker.debian.org
16

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.002

Percentile

62.0%

JSON

Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI ‘portmap’ plugin, used to setup HostPorts for CNI, inserts rules at the front of the iptables nat chains; which take precedence over the KUBE- SERVICES chain. Because of this, the HostPort/portmap rule could match incoming traffic even if there were better fitting, more specific service definition rules like NodePorts later in the chain. The issue is fixed in CNI 0.7.5 and Kubernetes 1.11.9, 1.12.7, 1.13.5, and 1.14.0.

OSVersionArchitecturePackageVersionFilename
Debian12allgolang-github-containernetworking-plugins< 1.1.1+ds1-3golang-github-containernetworking-plugins_1.1.1+ds1-3_all.deb
Debian11allgolang-github-containernetworking-plugins< 0.9.0-1golang-github-containernetworking-plugins_0.9.0-1_all.deb
Debian999allgolang-github-containernetworking-plugins< 1.1.1+ds1-3golang-github-containernetworking-plugins_1.1.1+ds1-3_all.deb
Debian13allgolang-github-containernetworking-plugins< 1.1.1+ds1-3golang-github-containernetworking-plugins_1.1.1+ds1-3_all.deb
Debian12allkubernetes< 1.17.4-1kubernetes_1.17.4-1_all.deb
Debian11allkubernetes< 1.17.4-1kubernetes_1.17.4-1_all.deb
Debian999allkubernetes< 1.17.4-1kubernetes_1.17.4-1_all.deb
Debian13allkubernetes< 1.17.4-1kubernetes_1.17.4-1_all.deb
Debian999allsingularity-container< 3.5.0+ds1-1singularity-container_3.5.0+ds1-1_all.deb

Related

veracode 1
nvd 1
fedora 2
redhatcve 1
nessus 7
ubuntucve 1
ibm 5
alpinelinux 1
prion 1
cloudfoundry 1
cve 1
osv 4
photon 3
openvas 2
cvelist 1
hackerone 1
redhat 1
oraclelinux 5
rocky 1
veracode
veracode
Firewall Misconfiguration
2019-04-03 02:27:37
nvd
nvd
CVE-2019-9946
2019-04-02 18:30:26
fedora
fedora
[SECURITY] Fedora 30 Update: containernetworking-plugins-0.7.5-1.fc30
2019-06-12 14:48:31
[SECURITY] Fedora 29 Update: containernetworking-plugins-0.7.5-1.fc29
2019-06-15 01:21:29
redhatcve
redhatcve
CVE-2019-9946
2020-04-02 14:08:46
nessus
nessus
RHEL 8 : kubernetes (Unpatched Vulnerability)
2024-05-11 00:00:00
Photon OS 2.0: Kubernetes PHSA-2019-2.0-0148
2019-05-14 00:00:00
Fedora 29 : containernetworking-plugins (2019-24217abfdf)
2019-06-17 00:00:00
ubuntucve
ubuntucve
CVE-2019-9946
2019-04-02 00:00:00
ibm
ibm
Security Bulletin: IBM Cloud Kubernetes Service is affected by a CNI security vulnerability
2019-04-09 15:50:01
Security Bulletin: API Connect V2018 is impacted by a security degradation vulnerability in Kubernetes (CVE-2019-9946)
2019-05-19 14:50:01
Security Bulletin: IBM Cloud Private for Data is affected multiple security vulnerabilities in IBM Cloud Private Kubernetes
2019-10-03 22:50:40
alpinelinux
alpinelinux
CVE-2019-9946
2019-04-02 18:30:26
prion
prion
Code injection
2019-04-02 18:30:00
cloudfoundry
cloudfoundry
CVE-2019-9946: Kubernetes affecting certain network configurations with CNI | Cloud Foundry
2019-04-01 00:00:00
cve
cve
CVE-2019-9946
2019-04-02 18:30:26
osv
osv
CVE-2019-9946
2019-04-02 18:30:26
k3s-1.21.3+k3s1-1.2 on GA media
2024-06-15 00:00:00
Important: container-tools:rhel8 security, bug fix, and enhancement update
2019-11-05 17:41:57
photon
photon
Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-2.0-0148
2019-04-03 00:00:00
Important Photon OS Security Update - PHSA-2019-0148
2019-04-03 00:00:00
Important Photon OS Security Update - PHSA-2019-0239
2019-06-17 00:00:00
openvas
openvas
Fedora Update for containernetworking-plugins FEDORA-2019-d2b57d3b19
2019-06-13 00:00:00
Fedora Update for containernetworking-plugins FEDORA-2019-24217abfdf
2019-06-15 00:00:00
cvelist
cvelist
CVE-2019-9946
2019-04-02 17:22:52
hackerone
hackerone
Kubernetes: IPv4 only clusters susceptible to MitM attacks via IPv6 rogue router advertisements
2020-03-15 17:34:18
redhat
redhat
(RHSA-2019:3403) Important: container-tools:rhel8 security, bug fix, and enhancement update
2019-11-05 17:41:57
oraclelinux
oraclelinux
kubernetes security update
2019-04-13 00:00:00
kubernetes security update
2019-04-13 00:00:00
kubernetes security update
2019-04-13 00:00:00
rocky
rocky
container-tools:rhel8 security, bug fix, and enhancement update
2019-11-05 17:41:57

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.002

Percentile

62.0%

JSON
Related for DEBIANCVE:CVE-2019-9946
veracode1nvd1fedora2redhatcve1nessus7ubuntucve1ibm5alpinelinux1prion1cloudfoundry1cve1osv4photon3openvas2cvelist1hackerone1redhat1oraclelinux5rocky1