Lucene search
PRIOn knowledge basePRION:CVE-2021-20206HistoryMar 26, 2021 - 10:15 p.m.
Design/Logic Flaw
2021-03-2622:15:00
PRIOn knowledge base
www.prio-n.com
5
An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the ‘type’ field in the network configuration, it is possible to use special elements such as “…/” separators to reference binaries elsewhere on the system. This flaw allows an attacker to execute other existing binaries other than the cni plugins/types, such as ‘reboot’. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| container_network_interface | lt | 0.8.1 |
Related
osv
osv
Improper limitation of path name in github.com/containernetworking/cni
2022-07-01 20:17:57
containernetworking/cni improper limitation of path name
2022-02-15 01:57:18
CVE-2021-20206
2021-03-26 22:15:00
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2022:4593-1)
2022-12-21 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:4592-1)
2022-12-21 00:00:00
nessus
nessus
SUSE SLES15 Security Update : cni (SUSE-SU-2022:4150-1)
2022-11-23 00:00:00
SUSE SLES15 Security Update : cni-plugins (SUSE-SU-2022:4593-1)
2022-12-21 00:00:00
RHEL 8 : containernetworking-cni (Unpatched Vulnerability)
2024-05-11 00:00:00
alpinelinux
alpinelinux
CVE-2021-20206
2021-03-26 22:15:12
fedora
fedora
[SECURITY] Fedora 33 Update: skopeo-1.2.2-1.fc33
2021-02-26 01:09:46
[SECURITY] Fedora 33 Update: buildah-1.19.6-2.fc33
2021-02-26 01:09:45
[SECURITY] Fedora 33 Update: containernetworking-plugins-0.9.1-2.fc33
2021-02-26 01:09:46
redhat
redhat
cvelist
cvelist
CVE-2021-20206
2021-03-26 21:34:58
ubuntucve
ubuntucve
CVE-2021-20206
2021-03-26 00:00:00
veracode
veracode
Arbitrary Path Injection
2021-02-08 06:36:34
debiancve
debiancve
CVE-2021-20206
2021-03-26 22:15:12
cve
cve
CVE-2021-20206
2021-03-26 22:15:12
nvd
nvd
CVE-2021-20206
2021-03-26 22:15:12
github
github
containernetworking/cni improper limitation of path name
2022-02-15 01:57:18
redhatcve
redhatcve
CVE-2021-20206
2021-02-05 06:22:02
suse
suse
Security update for buildah (important)
2022-10-26 00:00:00
Security update for buildah (moderate)
2022-03-09 00:00:00
Security update for buildah (important)
2022-10-19 00:00:00
mageia
mageia
Updated skopeo/buildah/podman packages fix security vulnerability
2023-07-07 08:54:45
