github.com/containernetworking/plugins is vulnerable to man-in-the-middle (MitM). The attack is possible when rogue IPv6 router advertisements are sent to the host or other containers, causing the host to redirect part or all of the IPv6 traffic of the host to the attacker-controlled container.
lists.opensuse.org/opensuse-security-announce/2020-07/msg00063.html
lists.opensuse.org/opensuse-security-announce/2020-07/msg00065.html
bugzilla.redhat.com/show_bug.cgi?id=CVE-2020-10749
github.com/containernetworking/plugins/commit/ad10b6fa91aacd720f1f9ab94341a97a82a24965
github.com/containernetworking/plugins/pull/484
groups.google.com/forum/#!topic/kubernetes-security-announce/BMb_6ICCfp8
lists.fedoraproject.org/archives/list/[email protected]/message/DV3HCDZYUTPPVDUMTZXDKK6IUO3JMGJC/