RHSA-2020:2684MediumCVSS 6.0

Red Hat Security Advisory: containernetworking-plugins security update

Published
June 23, 2020
Last Modified
August 4, 2026

🔗 CVE IDs covered (1)

CVE-2020-10749 →

📋 Description

CVE-2020-10749 — containernetworking/plugins: IPv6 router advertisements allow for MitM attacks on IPv4 clusters

🎯 Affected products8

  • Red Hat Enterprise Linux 7 Extras
  • containernetworking-plugins-0:0.8.3-3.el7_8.ppc64le as a component of Red Hat Enterprise Linux 7 Extras
  • containernetworking-plugins-0:0.8.3-3.el7_8.s390x as a component of Red Hat Enterprise Linux 7 Extras
  • containernetworking-plugins-0:0.8.3-3.el7_8.src as a component of Red Hat Enterprise Linux 7 Extras
  • containernetworking-plugins-0:0.8.3-3.el7_8.x86_64 as a component of Red Hat Enterprise Linux 7 Extras
  • containernetworking-plugins-debuginfo-0:0.8.3-3.el7_8.ppc64le as a component of Red Hat Enterprise Linux 7 Extras
  • containernetworking-plugins-debuginfo-0:0.8.3-3.el7_8.s390x as a component of Red Hat Enterprise Linux 7 Extras
  • containernetworking-plugins-debuginfo-0:0.8.3-3.el7_8.x86_64 as a component of Red Hat Enterprise Linux 7 Extras

✅ Remediation

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258 Workaround: Prevent untrusted, non-privileged containers from running with CAP_NET_RAW.

🔗 References (4)