CVE-2020-10749 containernetworking/plugins vulnerable to MitM attacks

Medium 6.0 Published 3 Jun 2020 Updated 4 Aug 2024

Malicious containers can perform man-in-the-middle attacks by sending rogue IPv6 router advertisements to redirect traffic.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2020-10749?

CVE-2020-10749 is a medium-severity vulnerability in Fedoraproject Fedora, published on 3 Jun 2020. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A vulnerability was found in all versions of containernetworking/plugins before version 0.8.6, that allows malicious containers in Kubernetes clusters to perform man-in-the-middle (MitM) attacks. A malicious container can exploit this flaw by sending rogue IPv6 router advertisements to the host or other containers, to redirect traffic to the malicious container.

Weakness: CWE-300

Which versions are affected by CVE-2020-10749?

3 open source packages ship an affected version, including github.com/containernetworking/plugins. It affects 4 products.

Package	Affected	Fixed in
`github.com/containernetworking/plugins` Go	All versions	`0.8.6`
`github.com/containernetworking/plugins` Go	All versions	`0.8.6`
`github.com/containernetworking/plugins` Go	All versions	`0.8.6`

Linux distribution packages (23)

`containernetworking-plugins` Red Hat:openshift:4.2::el7	All versions	`0:0.8.6-1.rhaos4.2.el7`
`containernetworking-plugins-debuginfo` Red Hat:openshift:4.2::el7	All versions	`0:0.8.6-1.rhaos4.2.el7`
`containernetworking-plugins` Red Hat:openshift:4.2::el8	All versions	`0:0.8.6-1.rhaos4.2.el8`
`containernetworking-plugins-debuginfo` Red Hat:openshift:4.2::el8	All versions	`0:0.8.6-1.rhaos4.2.el8`
`containernetworking-plugins-debugsource` Red Hat:openshift:4.2::el8	All versions	`0:0.8.6-1.rhaos4.2.el8`
`containernetworking-plugins` Red Hat:openshift:4.3::el7	All versions	`0:0.8.6-1.rhaos4.3.el7`
`containernetworking-plugins-debuginfo` Red Hat:openshift:4.3::el7	All versions	`0:0.8.6-1.rhaos4.3.el7`
`containernetworking-plugins` Red Hat:openshift:4.3::el8	All versions	`0:0.8.6-1.rhaos4.3.el8`
`containernetworking-plugins-debuginfo` Red Hat:openshift:4.3::el8	All versions	`0:0.8.6-1.rhaos4.3.el8`
`containernetworking-plugins-debugsource` Red Hat:openshift:4.3::el8	All versions	`0:0.8.6-1.rhaos4.3.el8`
`containernetworking-plugins` Red Hat:openshift:4.4::el7	All versions	`0:0.8.6-1.rhaos4.4.el7`
`containernetworking-plugins-debuginfo` Red Hat:openshift:4.4::el7	All versions	`0:0.8.6-1.rhaos4.4.el7`
`containernetworking-plugins` Red Hat:openshift:4.4::el8	All versions	`0:0.8.6-1.rhaos4.4.el8`
`containernetworking-plugins-debuginfo` Red Hat:openshift:4.4::el8	All versions	`0:0.8.6-1.rhaos4.4.el8`
`containernetworking-plugins-debugsource` Red Hat:openshift:4.4::el8	All versions	`0:0.8.6-1.rhaos4.4.el8`
`containernetworking-plugins` Red Hat:rhel_extras_other:7	All versions	`0:0.8.3-3.el7_8`
`containernetworking-plugins-debuginfo` Red Hat:rhel_extras_other:7	All versions	`0:0.8.3-3.el7_8`
`cni-plugins` SUSE:Linux Enterprise Module for Containers 15 SP1	All versions	`0.8.6-3.6.1`
`cni-plugins` SUSE:Linux Enterprise Module for Containers 15 SP2	All versions	`0.8.6-3.6.1`
`cni-plugins` SUSE:Linux Enterprise Module for Public Cloud 15 SP1	All versions	`0.8.6-3.6.1`
`cni-plugins` openSUSE:Leap 15.1	All versions	`0.8.6-lp151.2.6.1`
`cni-plugins` openSUSE:Leap 15.2	All versions	`0.8.6-lp152.2.4.1`
`cni-plugins` openSUSE:Tumbleweed	All versions	`0.9.1-1.3`

Products include Fedoraproject Fedora, Linuxfoundation Cni Network Plugins, Redhat Enterprise Linux, Redhat Openshift Container Platform.

How do I fix CVE-2020-10749?

Upgrade github.com/containernetworking/plugins to 0.8.6 or later.

Is CVE-2020-10749 being exploited?

There is no known exploitation of CVE-2020-10749 in the wild and no public exploit code.

Public exploit code: 1 proofs of concept on GitHub.

All Fedoraproject Fedora vulnerabilities

Sources

Also known as DEBIAN-CVE-2020-10749, GHSA-fx6x-h9g4-56f8, GO-2023-1915, RHSA-2020:2403, RHSA-2020:2443, RHSA-2020:2592 and 6 more.