Medium severity6.0NVD Advisory· Published Jun 3, 2020· Updated Jun 17, 2026
CVE-2020-10749
CVE-2020-10749
Description
A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/containernetworking/pluginsGo | < 0.8.6 | 0.8.6 |
Affected products
53- osv-coords47 versionspkg:apk/chainguard/cni-plugins-fipspkg:apk/chainguard/cni-plugins-fips-ipvlanpkg:apk/chainguard/cni-plugins-fips-static-compatpkg:apk/chainguard/cni-plugins-fips-host-device-compatpkg:apk/chainguard/cni-plugins-fips-ipvlan-compatpkg:apk/chainguard/cni-plugins-fips-mainpkg:rpm/opensuse/cni-plugins&distro=openSUSE%20Leap%2015.1pkg:apk/chainguard/cni-plugins-fips-loopbackpkg:apk/chainguard/cni-plugins-fips-portmap-compatpkg:golang/github.com/containernetworking/pluginspkg:apk/chainguard/cni-plugins-fips-tuningpkg:rpm/suse/cni-plugins&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015%20SP1pkg:apk/chainguard/cni-plugins-fips-macvlanpkg:apk/chainguard/cni-plugins-fips-metapkg:apk/chainguard/cni-plugins-fips-portmappkg:rpm/almalinux/libslirppkg:rpm/almalinux/libslirp-develpkg:rpm/almalinux/python-podman-apipkg:apk/chainguard/cni-plugins-fips-bandwidthpkg:apk/chainguard/cni-plugins-fips-bandwidth-compatpkg:apk/chainguard/cni-plugins-fips-bridgepkg:apk/chainguard/cni-plugins-fips-bridge-compatpkg:apk/chainguard/cni-plugins-fips-dhcp-compatpkg:apk/chainguard/cni-plugins-fips-dummypkg:apk/chainguard/cni-plugins-fips-dummy-compatpkg:apk/chainguard/cni-plugins-fips-firewallpkg:apk/chainguard/cni-plugins-fips-host-devicepkg:apk/chainguard/cni-plugins-fips-host-localpkg:apk/chainguard/cni-plugins-fips-host-local-compatpkg:apk/chainguard/cni-plugins-fips-ipampkg:apk/chainguard/cni-plugins-fips-loopback-compatpkg:apk/chainguard/cni-plugins-fips-macvlan-compatpkg:apk/chainguard/cni-plugins-fips-ptppkg:apk/chainguard/cni-plugins-fips-ptp-compatpkg:apk/chainguard/cni-plugins-fips-sbrpkg:apk/chainguard/cni-plugins-fips-sbr-compatpkg:apk/chainguard/cni-plugins-fips-staticpkg:apk/chainguard/cni-plugins-fips-tuning-compatpkg:apk/chainguard/cni-plugins-fips-vlanpkg:apk/chainguard/cni-plugins-fips-vlan-compatpkg:apk/chainguard/cni-plugins-fips-firewall-compatpkg:apk/chainguard/cni-plugins-fips-dhcppkg:rpm/suse/cni-plugins&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2015%20SP1pkg:rpm/suse/cni-plugins&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Containers%2015%20SP2pkg:rpm/opensuse/cni-plugins&distro=openSUSE%20Tumbleweedpkg:rpm/suse/cni-plugins&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Public%20Cloud%2015pkg:rpm/opensuse/cni-plugins&distro=openSUSE%20Leap%2015.2
< 0+ 46 more
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0.8.6-lp151.2.6.1
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0.8.6
- (no CPE)range: < 0
- (no CPE)range: < 0.8.6-3.6.1
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 4.3.1-1.module_el8.6.0+2876+9ed4eae2
- (no CPE)range: < 4.3.1-1.module_el8.6.0+2876+9ed4eae2
- (no CPE)range: < 1.2.0-0.2.gitd0a45fe.module_el8.5.0+2635+e4386a39
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0.8.6-3.6.1
- (no CPE)range: < 0.8.6-3.6.1
- (no CPE)range: < 0.9.1-1.3
- (no CPE)range: < 0.8.6-150000.1.7.1
- (no CPE)range: < 0.8.6-lp152.2.4.1
- Red Hat/containernetworking/pluginsv5Range: all containernetworking/plugins versions before version 0.8.6
- cpe:2.3:a:linuxfoundation:cni_network_plugins:*:*:*:*:*:*:*:*Range: <0.8.6
- cpe:2.3:a:redhat:openshift_container_platform:4.0:*:*:*:*:*:*:*
- cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
10- lists.opensuse.org/opensuse-security-announce/2020-07/msg00063.htmlnvdBroken LinkThird Party AdvisoryWEB
- lists.opensuse.org/opensuse-security-announce/2020-07/msg00065.htmlnvdBroken LinkThird Party AdvisoryWEB
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party AdvisoryWEB
- github.com/advisories/GHSA-fx6x-h9g4-56f8ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2020-10749ghsaADVISORY
- github.com/containernetworking/plugins/releases/tag/v0.8.6ghsaWEB
- groups.google.com/forum/ghsaWEB
- lists.fedoraproject.org/archives/list/[email protected]/message/DV3HCDZYUTPPVDUMTZXDKK6IUO3JMGJCghsaWEB
- groups.google.com/forum/nvd
- lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/DV3HCDZYUTPPVDUMTZXDKK6IUO3JMGJC/nvd
News mentions
0No linked articles in our index yet.