Lucene search

K

GoogleOSV:CVE-2020-10749

HistoryJun 03, 2020 - 2:15 p.m.

CVE-2020-10749

2020-06-0314:15:12

Google

osv.dev

10

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

40.1%

A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.

References

lists.opensuse.org/opensuse-security-announce/2020-07/msg00063.html

lists.opensuse.org/opensuse-security-announce/2020-07/msg00065.html

bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10749

groups.google.com/forum/#%21topic/kubernetes-security-announce/BMb_6ICCfp8

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DV3HCDZYUTPPVDUMTZXDKK6IUO3JMGJC/

AI Score

6.9

Confidence

High

EPSS

0.001

Percentile

40.1%

Related for OSV:CVE-2020-10749

nessus17 cve1 osv6 redhatcve1 prion1 f51 nvd1 redhat8 githubexploit1 veracode1 fedora1 github1 openvas5 cvelist1 ibm1 suse2 alpinelinux1 ubuntucve1 debiancve1 oraclelinux4 rocky1 almalinux1