Every CVE Search/ Get API key

CVE-2020-10749

containernetworking/plugins vulnerable to MitM attacks

6.0 MediumPublic exploitFix available

A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
High
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
Low
Integrity
Low
Availability
Low

Exploit likelihood

2.09%Down 3.3 points since Apr 14, 2021
90%50%10%1%

What each source reports

CVE List Score used 6.0

A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.

Record
CVE-2020-10749
CVSS 3.1
6.0 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Weakness
CWE-300
Updated
2026-11-02
EUVDEUVD-2022-3850 6.0

A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.

Record
EUVD-2022-3850
CVSS 3.1
6.0 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-03
GitHub AdvisoriesGHSA-fx6x-h9g4-56f8 6.0

containernetworking/plugins vulnerable to MitM attacks

A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.

Record
GHSA-fx6x-h9g4-56f8
CVSS 3.1
6.0 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Weakness
CWE-300
Updated
2026-11-02
NVD 6.0

A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.

Record
CVE-2020-10749
CVSS 3.1
6.0 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
CVSS 2.0
6.0 MediumAV:N/AC:M/Au:S/C:P/I:P/A:P
Weakness
CWE-300
Updated
2026-11-02
OSVALPINE-CVE-2020-10749 6.0

A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.

Record
ALPINE-CVE-2020-10749
CVSS 3.1
6.0 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-03
OSV 6.0

A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.

Record
CVE-2020-10749
CVSS 3.1
6.0 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
Show 16 moreShow less
OSVDEBIAN-CVE-2020-10749 6.0

A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.

Record
DEBIAN-CVE-2020-10749
CVSS 3.1
6.0 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVGHSA-fx6x-h9g4-56f8 6.0

containernetworking/plugins vulnerable to MitM attacks

A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.

Record
GHSA-fx6x-h9g4-56f8
CVSS 3.1
6.0 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Weakness
CWE-300
Updated
2026-11-02
OSVRHSA-2020:2403 6.0

Red Hat Security Advisory: OpenShift Container Platform 4.4.8 containernetworking-plugins security update

Record
RHSA-2020:2403
CVSS 3.1
6.0 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:2443 6.0

Red Hat Security Advisory: OpenShift Container Platform 4.3.25 containernetworking-plugins security update

Record
RHSA-2020:2443
CVSS 3.1
6.0 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:2592 6.0

Red Hat Security Advisory: OpenShift Container Platform 4.2.36 containernetworking-plugins security update

Record
RHSA-2020:2592
CVSS 3.1
6.0 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:2684 6.0

Red Hat Security Advisory: containernetworking-plugins security update

Record
RHSA-2020:2684
CVSS 3.1
6.0 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVRHSA-2020:4694 7.5

Red Hat Security Advisory: container-tools:rhel8 security, bug fix, and enhancement update

Record
RHSA-2020:4694
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVRLSA-2020:4694 7.5

Moderate: container-tools:rhel8 security, bug fix, and enhancement update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

  • containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters (CVE-2020-10749)

  • QEMU: slirp: networking out-of-bounds read information disclosure vulnerability (CVE-2020-10756)

  • golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash (CVE-2020-14040)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.

Record
RLSA-2020:4694
CVSS 3.1
7.5 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2020-10749 6.0

A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.

Record
UBUNTU-CVE-2020-10749
CVSS 3.1
6.0 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:L
Updated
2026-11-02
OSVALSA-2020:4694 No score

Moderate: container-tools:rhel8 security, bug fix, and enhancement update

The container-tools module contains tools for working with containers, notably podman, buildah, skopeo, and runc.

Security Fix(es):

  • containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters (CVE-2020-10749)

  • QEMU: slirp: networking out-of-bounds read information disclosure vulnerability (CVE-2020-10756)

  • golang.org/x/text: possibility to trigger an infinite loop in encoding/unicode could lead to crash (CVE-2020-14040)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

Record
ALSA-2020:4694
Updated
2026-11-02
OSVGO-2023-1915 No score

containernetworking/plugins vulnerable to MitM attacks in github.com/containernetworking/plugins

containernetworking/plugins vulnerable to MitM attacks in github.com/containernetworking/plugins

Record
GO-2023-1915
Updated
2026-11-02
OSVopenSUSE-SU-2020:1049-1 No score

Security update for cni-plugins

This update for cni-plugins fixes the following issues:

cni-plugins updated to version 0.8.6

  • CVE-2020-10749: Fixed a potential Man-in-the-Middle attacks in IPv4 clusters by spoofing IPv6 router advertisements (bsc#1172410).

Release notes: https://github.com/containernetworking/plugins/releases/tag/v0.8.6

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Record
openSUSE-SU-2020:1049-1
Updated
2026-11-02
OSVopenSUSE-SU-2020:1050-1 No score

Security update for cni-plugins

This update for cni-plugins fixes the following issues:

cni-plugins updated to version 0.8.6

  • CVE-2020-10749: Fixed a potential Man-in-the-Middle attacks in IPv4 clusters by spoofing IPv6 router advertisements (bsc#1172410).

Release notes: https://github.com/containernetworking/plugins/releases/tag/v0.8.6

Record
openSUSE-SU-2020:1050-1
Updated
2026-11-02
OSVopenSUSE-SU-2024:10689-1 No score

cni-plugins-0.9.1-1.3 on GA media

These are all security issues fixed in the cni-plugins-0.9.1-1.3 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10689-1
Updated
2026-11-02
OSVSUSE-SU-2020:1957-1 No score

Security update for cni-plugins

This update for cni-plugins fixes the following issues:

cni-plugins updated to version 0.8.6

  • CVE-2020-10749: Fixed a potential Man-in-the-Middle attacks in IPv4 clusters by spoofing IPv6 router advertisements (bsc#1172410).

Release notes: https://github.com/containernetworking/plugins/releases/tag/v0.8.6

Record
SUSE-SU-2020:1957-1
Updated
2026-11-02
OSVSUSE-SU-2022:4151-1 No score

Security update for cni-plugins

This update for cni-plugins fixes the following issues:

  • CVE-2021-20206: Fixed arbitrary path injection via type field in CNI configuration (bsc#1181961).
Record
SUSE-SU-2022:4151-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
github.com/containernetworking/plugins
Go
 before 0.8.6
0.8.6
k3s
Alpine:v3.13
 before 1.18.3.1-r0
1.18.3.1-r0
k3s
Alpine:v3.14
 before 1.18.3.1-r0
1.18.3.1-r0
k3s
Alpine:v3.15
 before 1.18.3.1-r0
1.18.3.1-r0
k3s
Alpine:v3.16
 before 1.18.3.1-r0
1.18.3.1-r0
k3s
Alpine:v3.17
 before 1.18.3.1-r0
1.18.3.1-r0
k3s
Alpine:v3.18
 before 1.18.3.1-r0
1.18.3.1-r0
k3s
Alpine:v3.19
 before 1.18.3.1-r0
1.18.3.1-r0
k3s
Alpine:v3.20
 before 1.18.3.1-r0
1.18.3.1-r0
k3s
Alpine:v3.21
 before 1.18.3.1-r0
1.18.3.1-r0
Show 95 moreShow less
Affected packages
PackageAffectedFixed
k3s
Alpine:v3.22
 before 1.18.3.1-r0
1.18.3.1-r0
k3s
Alpine:v3.23
 before 1.18.3.1-r0
1.18.3.1-r0
k3s
Alpine:v3.24
 before 1.18.3.1-r0
1.18.3.1-r0
libslirp
AlmaLinux:8
From an advisory covering 3 CVEs
 before 4.3.1-1.module_el8.6.0+2876+9ed4eae2
4.3.1-1.module_el8.6.0+2876+9ed4eae2
libslirp-devel
AlmaLinux:8
From an advisory covering 3 CVEs
 before 4.3.1-1.module_el8.6.0+2876+9ed4eae2
4.3.1-1.module_el8.6.0+2876+9ed4eae2
python-podman-api
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.2.0-0.2.gitd0a45fe.module_el8.5.0+2635+e4386a39
1.2.0-0.2.gitd0a45fe.module_el8.5.0+2635+e4386a39
python-podman-api
AlmaLinux:8
From an advisory covering 3 CVEs
 before 1.2.0-0.2.gitd0a45fe.module_el8.5.0+108+00865455
1.2.0-0.2.gitd0a45fe.module_el8.5.0+108+00865455
golang-github-containernetworking-plugins
Debian:12
 before 0.8.6-1
0.8.6-1
golang-github-containernetworking-plugins
Debian:13
 before 0.8.6-1
0.8.6-1
golang-github-containernetworking-plugins
Debian:14
 before 0.8.6-1
0.8.6-1
containernetworking-plugins
Red Hat:openshift:4.4::el7
 before 0:0.8.6-1.rhaos4.4.el7
0:0.8.6-1.rhaos4.4.el7
containernetworking-plugins-debuginfo
Red Hat:openshift:4.4::el7
 before 0:0.8.6-1.rhaos4.4.el7
0:0.8.6-1.rhaos4.4.el7
containernetworking-plugins
Red Hat:openshift:4.4::el8
 before 0:0.8.6-1.rhaos4.4.el8
0:0.8.6-1.rhaos4.4.el8
containernetworking-plugins-debuginfo
Red Hat:openshift:4.4::el8
 before 0:0.8.6-1.rhaos4.4.el8
0:0.8.6-1.rhaos4.4.el8
containernetworking-plugins-debugsource
Red Hat:openshift:4.4::el8
 before 0:0.8.6-1.rhaos4.4.el8
0:0.8.6-1.rhaos4.4.el8
containernetworking-plugins
Red Hat:openshift:4.3::el7
 before 0:0.8.6-1.rhaos4.3.el7
0:0.8.6-1.rhaos4.3.el7
containernetworking-plugins-debuginfo
Red Hat:openshift:4.3::el7
 before 0:0.8.6-1.rhaos4.3.el7
0:0.8.6-1.rhaos4.3.el7
containernetworking-plugins
Red Hat:openshift:4.3::el8
 before 0:0.8.6-1.rhaos4.3.el8
0:0.8.6-1.rhaos4.3.el8
containernetworking-plugins-debuginfo
Red Hat:openshift:4.3::el8
 before 0:0.8.6-1.rhaos4.3.el8
0:0.8.6-1.rhaos4.3.el8
containernetworking-plugins-debugsource
Red Hat:openshift:4.3::el8
 before 0:0.8.6-1.rhaos4.3.el8
0:0.8.6-1.rhaos4.3.el8
containernetworking-plugins
Red Hat:openshift:4.2::el7
 before 0:0.8.6-1.rhaos4.2.el7
0:0.8.6-1.rhaos4.2.el7
containernetworking-plugins-debuginfo
Red Hat:openshift:4.2::el7
 before 0:0.8.6-1.rhaos4.2.el7
0:0.8.6-1.rhaos4.2.el7
containernetworking-plugins
Red Hat:openshift:4.2::el8
 before 0:0.8.6-1.rhaos4.2.el8
0:0.8.6-1.rhaos4.2.el8
containernetworking-plugins-debuginfo
Red Hat:openshift:4.2::el8
 before 0:0.8.6-1.rhaos4.2.el8
0:0.8.6-1.rhaos4.2.el8
containernetworking-plugins-debugsource
Red Hat:openshift:4.2::el8
 before 0:0.8.6-1.rhaos4.2.el8
0:0.8.6-1.rhaos4.2.el8
containernetworking-plugins
Red Hat:rhel_extras_other:7
 before 0:0.8.3-3.el7_8
0:0.8.3-3.el7_8
containernetworking-plugins-debuginfo
Red Hat:rhel_extras_other:7
 before 0:0.8.3-3.el7_8
0:0.8.3-3.el7_8
buildah
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.15.1-2.module+el8.3.0+8221+97165c3f
0:1.15.1-2.module+el8.3.0+8221+97165c3f
buildah-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.15.1-2.module+el8.3.0+8221+97165c3f
0:1.15.1-2.module+el8.3.0+8221+97165c3f
buildah-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.15.1-2.module+el8.3.0+8221+97165c3f
0:1.15.1-2.module+el8.3.0+8221+97165c3f
buildah-tests
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.15.1-2.module+el8.3.0+8221+97165c3f
0:1.15.1-2.module+el8.3.0+8221+97165c3f
buildah-tests-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.15.1-2.module+el8.3.0+8221+97165c3f
0:1.15.1-2.module+el8.3.0+8221+97165c3f
cockpit-podman
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:18.1-2.module+el8.3.0+8221+97165c3f
0:18.1-2.module+el8.3.0+8221+97165c3f
conmon
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 2:2.0.20-2.module+el8.3.0+8221+97165c3f
2:2.0.20-2.module+el8.3.0+8221+97165c3f
container-selinux
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 2:2.144.0-1.module+el8.3.0+8221+97165c3f
2:2.144.0-1.module+el8.3.0+8221+97165c3f
containernetworking-plugins
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:0.8.6-2.module+el8.3.0+8221+97165c3f
0:0.8.6-2.module+el8.3.0+8221+97165c3f
containernetworking-plugins-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:0.8.6-2.module+el8.3.0+8221+97165c3f
0:0.8.6-2.module+el8.3.0+8221+97165c3f
containernetworking-plugins-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:0.8.6-2.module+el8.3.0+8221+97165c3f
0:0.8.6-2.module+el8.3.0+8221+97165c3f
containers-common
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 1:1.1.1-3.module+el8.3.0+8221+97165c3f
1:1.1.1-3.module+el8.3.0+8221+97165c3f
crit
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.14-2.module+el8.3.0+8221+97165c3f
0:3.14-2.module+el8.3.0+8221+97165c3f
criu
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.14-2.module+el8.3.0+8221+97165c3f
0:3.14-2.module+el8.3.0+8221+97165c3f
criu-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.14-2.module+el8.3.0+8221+97165c3f
0:3.14-2.module+el8.3.0+8221+97165c3f
criu-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.14-2.module+el8.3.0+8221+97165c3f
0:3.14-2.module+el8.3.0+8221+97165c3f
crun
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:0.14.1-2.module+el8.3.0+8221+97165c3f
0:0.14.1-2.module+el8.3.0+8221+97165c3f
crun-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:0.14.1-2.module+el8.3.0+8221+97165c3f
0:0.14.1-2.module+el8.3.0+8221+97165c3f
crun-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:0.14.1-2.module+el8.3.0+8221+97165c3f
0:0.14.1-2.module+el8.3.0+8221+97165c3f
fuse-overlayfs
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.1.2-3.module+el8.3.0+8221+97165c3f
0:1.1.2-3.module+el8.3.0+8221+97165c3f
fuse-overlayfs-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.1.2-3.module+el8.3.0+8221+97165c3f
0:1.1.2-3.module+el8.3.0+8221+97165c3f
fuse-overlayfs-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.1.2-3.module+el8.3.0+8221+97165c3f
0:1.1.2-3.module+el8.3.0+8221+97165c3f
libslirp
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:4.3.1-1.module+el8.3.0+8221+97165c3f
0:4.3.1-1.module+el8.3.0+8221+97165c3f
libslirp-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:4.3.1-1.module+el8.3.0+8221+97165c3f
0:4.3.1-1.module+el8.3.0+8221+97165c3f
libslirp-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:4.3.1-1.module+el8.3.0+8221+97165c3f
0:4.3.1-1.module+el8.3.0+8221+97165c3f
libslirp-devel
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:4.3.1-1.module+el8.3.0+8221+97165c3f
0:4.3.1-1.module+el8.3.0+8221+97165c3f
oci-seccomp-bpf-hook
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.1.2-3.module+el8.3.0+8221+97165c3f
0:1.1.2-3.module+el8.3.0+8221+97165c3f
oci-seccomp-bpf-hook-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.1.2-3.module+el8.3.0+8221+97165c3f
0:1.1.2-3.module+el8.3.0+8221+97165c3f
oci-seccomp-bpf-hook-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.1.2-3.module+el8.3.0+8221+97165c3f
0:1.1.2-3.module+el8.3.0+8221+97165c3f
podman
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.0.5-5.module+el8.3.0+8221+97165c3f
0:2.0.5-5.module+el8.3.0+8221+97165c3f
podman-catatonit
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.0.5-5.module+el8.3.0+8221+97165c3f
0:2.0.5-5.module+el8.3.0+8221+97165c3f
podman-catatonit-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.0.5-5.module+el8.3.0+8221+97165c3f
0:2.0.5-5.module+el8.3.0+8221+97165c3f
podman-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.0.5-5.module+el8.3.0+8221+97165c3f
0:2.0.5-5.module+el8.3.0+8221+97165c3f
podman-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.0.5-5.module+el8.3.0+8221+97165c3f
0:2.0.5-5.module+el8.3.0+8221+97165c3f
podman-docker
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.0.5-5.module+el8.3.0+8221+97165c3f
0:2.0.5-5.module+el8.3.0+8221+97165c3f
podman-remote
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.0.5-5.module+el8.3.0+8221+97165c3f
0:2.0.5-5.module+el8.3.0+8221+97165c3f
podman-remote-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.0.5-5.module+el8.3.0+8221+97165c3f
0:2.0.5-5.module+el8.3.0+8221+97165c3f
podman-tests
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:2.0.5-5.module+el8.3.0+8221+97165c3f
0:2.0.5-5.module+el8.3.0+8221+97165c3f
python-podman-api
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.2.0-0.2.gitd0a45fe.module+el8.3.0+8221+97165c3f
0:1.2.0-0.2.gitd0a45fe.module+el8.3.0+8221+97165c3f
python3-criu
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:3.14-2.module+el8.3.0+8221+97165c3f
0:3.14-2.module+el8.3.0+8221+97165c3f
runc
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.0.0-68.rc92.module+el8.3.0+8221+97165c3f
0:1.0.0-68.rc92.module+el8.3.0+8221+97165c3f
runc-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.0.0-68.rc92.module+el8.3.0+8221+97165c3f
0:1.0.0-68.rc92.module+el8.3.0+8221+97165c3f
runc-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.0.0-68.rc92.module+el8.3.0+8221+97165c3f
0:1.0.0-68.rc92.module+el8.3.0+8221+97165c3f
skopeo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 1:1.1.1-3.module+el8.3.0+8221+97165c3f
1:1.1.1-3.module+el8.3.0+8221+97165c3f
skopeo-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 1:1.1.1-3.module+el8.3.0+8221+97165c3f
1:1.1.1-3.module+el8.3.0+8221+97165c3f
skopeo-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 1:1.1.1-3.module+el8.3.0+8221+97165c3f
1:1.1.1-3.module+el8.3.0+8221+97165c3f
skopeo-tests
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 1:1.1.1-3.module+el8.3.0+8221+97165c3f
1:1.1.1-3.module+el8.3.0+8221+97165c3f
slirp4netns
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.1.4-2.module+el8.3.0+8221+97165c3f
0:1.1.4-2.module+el8.3.0+8221+97165c3f
slirp4netns-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.1.4-2.module+el8.3.0+8221+97165c3f
0:1.1.4-2.module+el8.3.0+8221+97165c3f
slirp4netns-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:1.1.4-2.module+el8.3.0+8221+97165c3f
0:1.1.4-2.module+el8.3.0+8221+97165c3f
toolbox
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:0.0.8-1.module+el8.3.0+8221+97165c3f
0:0.0.8-1.module+el8.3.0+8221+97165c3f
udica
Red Hat:enterprise_linux:8::appstream
From an advisory covering 3 CVEs
 before 0:0.2.2-1.module+el8.3.0+8221+97165c3f
0:0.2.2-1.module+el8.3.0+8221+97165c3f
libslirp
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:4.3.1-1.module+el8.7.0+1076+9b1c11c1
0:4.3.1-1.module+el8.7.0+1076+9b1c11c1
libslirp
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:4.3.1-1.module+el8.4.0+556+40122d08
0:4.3.1-1.module+el8.4.0+556+40122d08
libslirp
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:4.3.1-1.module+el8.5.0+709+440d5e7e
0:4.3.1-1.module+el8.5.0+709+440d5e7e
libslirp
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:4.3.1-1.module+el8.6.0+783+10209741
0:4.3.1-1.module+el8.6.0+783+10209741
python-podman-api
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861
0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+770+e2f49861
python-podman-api
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2
0:1.2.0-0.2.gitd0a45fe.module+el8.4.0+559+c02fa3b2
python-podman-api
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d
0:1.2.0-0.2.gitd0a45fe.module+el8.5.0+708+6758137d
toolbox
Rocky Linux:8
From an advisory covering 3 CVEs
 before 0:0.0.8-1.module+el8.4.0+556+40122d08
0:0.0.8-1.module+el8.4.0+556+40122d08
cni-plugins
SUSE:Linux Enterprise Module for Containers 15 SP1
 before 0.8.6-3.6.1
0.8.6-3.6.1
cni-plugins
SUSE:Linux Enterprise Module for Containers 15 SP2
 before 0.8.6-3.6.1
0.8.6-3.6.1
cni-plugins
SUSE:Linux Enterprise Module for Public Cloud 15 SP1
 before 0.8.6-3.6.1
0.8.6-3.6.1
cni-plugins
SUSE:Linux Enterprise Module for Public Cloud 15
From an advisory covering 2 CVEs
 before 0.8.6-150000.1.7.1
0.8.6-150000.1.7.1
golang-github-containernetworking-plugins
Ubuntu:20.04:LTS
 All versions, plus listed versions
0.8.3-10.8.3-20.8.4-10.8.5-1
 None known
cni-plugins
openSUSE:Leap 15.1
 before 0.8.6-lp151.2.6.1
0.8.6-lp151.2.6.1
cni-plugins
openSUSE:Leap 15.2
 before 0.8.6-lp152.2.4.1
0.8.6-lp152.2.4.1
cni-plugins
openSUSE:Tumbleweed
 before 0.9.1-1.3
0.9.1-1.3

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubknqyf263/CVE-2020-107492020-06-11

History

History
RecordedChangedSources
affected, facts
affected, aliases, referencesOSV
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2020-10749 is a medium vulnerability (CVSS 6.0) in Red Hat Containernetworking/plugins, published June 3, 2020. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.09%, the 81st percentile. Fixed in github.com/containernetworking/plugins 0.8.6.

References

Show 108 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open