CVE-2020-13597

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-13597
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-13597.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-13597
Aliases
Published
2020-06-03T17:15:24.887Z
Modified
2026-08-07T11:31:27.534777556Z
Severity
  • 3.5 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

Clusters using Calico (version 3.14.0 and below), Calico Enterprise (version 2.8.2 and below), may be vulnerable to information disclosure if IPv6 is enabled but unused. A compromised pod with sufficient privilege is able to reconfigure the node’s IPv6 interface due to the node accepting route advertisement by default, allowing the attacker to redirect full or partial network traffic from the node to the compromised pod.

Database specific 
{
    "unresolved_ranges": [
        {
            "vendor_product": "projectcalico:calico",
            "source": "CPE_RANGE",
            "extracted_events": [
                {
                    "introduced": "2.7.0"
                },
                {
                    "last_affected": "2.7.4"
                },
                {
                    "introduced": "2.8.0"
                },
                {
                    "last_affected": "2.8.2"
                }
            ],
            "cpes": [
                "cpe:2.3:a:projectcalico:calico:*:*:*:*:enterprise:*:*:*"
            ]
        }
    ]
}
References

Affected packages

Git / github.com/projectcalico/calico

Affected ranges

Type
GIT
Repo
https://github.com/projectcalico/calico
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
1e5a93ab2d29e9dcf51b9d8c3e8a4d87de333dd7
Last affected
cfb4a6c29092e990d19d21c3f2a6686c2eca74f3
Introduced
fab86bba2faa52c81ea3ab5e4879b05eda5f7f3a
Last affected
2a502439d3e7d88e991f4af2ed3f5aed9d37021e
Introduced
7576f11000c9995db7967be415b1ad14bed73754
Last affected
52c554096ce926898b3d6d6f1544f90ba2999c25
Introduced
83bb665609bf74509e70aa15377b8673e73f42d4
Last affected
73a2a089264757fad7af0da49af64f5734c37cb2
Introduced
db9625b360f63e3835e34fdeb0386f96386d4c83
Last affected
ebd19b68e2bd3ff0de1a80042fc71631b9520b56
Introduced
abb849ccca917f397e620fbe2dbefcff2314a3c5
Last affected
abb849ccca917f397e620fbe2dbefcff2314a3c5
Introduced
a938982186262a559aefd5471d4e7fb6ef8ac207
Last affected
a938982186262a559aefd5471d4e7fb6ef8ac207
Database specific
Show details 
{
    "source": [
        "CPE_RANGE",
        "CPE_STRING"
    ],
    "cpe": [
        "cpe:2.3:a:projectcalico:calico:*:*:*:*:enterprise:*:*:*",
        "cpe:2.3:a:projectcalico:calico:*:*:*:*:*:*:*:*",
        "cpe:2.3:a:projectcalico:calico:3.14.0:*:*:*:*:*:*:*"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.6.2"
        },
        {
            "last_affected": "3.8.8"
        },
        {
            "introduced": "3.9.0"
        },
        {
            "last_affected": "3.9.5"
        },
        {
            "introduced": "3.10.0"
        },
        {
            "last_affected": "3.10.3"
        },
        {
            "introduced": "3.11.0"
        },
        {
            "last_affected": "3.11.2"
        },
        {
            "introduced": "3.12.0"
        },
        {
            "last_affected": "3.12.1"
        },
        {
            "introduced": "3.13.0"
        },
        {
            "last_affected": "3.13.3"
        },
        {
            "introduced": "3.14.0"
        },
        {
            "last_affected": "3.14.0"
        }
    ]
}

Affected versions

3.*
3.14.0
v0.*
v0.1.0-typha
v0.1.1-typha
v0.1.2-typha
v0.1.3-typha
v0.1.4-typha
v0.1.5-typha
v0.1.7-typha
v0.2.1-typha
v0.2.2-typha
v0.2.3-pre1-typha
v0.2.3-typha
v0.3.0-typha
v0.3.1-typha
v0.4.0-typha
v0.5.0-typha
v0.5.1-typha
v0.6.0-alpha1-rc1-typha
v0.6.0-alpha1-typha
v0.6.0-beta1-typha
v0.6.0-typha
v2.*
v2.5.0
v2.5.0-calico
v2.5.0-rc2
v2.5.0-rc2-calico
v2.6.0
v2.6.0-calico
v2.6.0-rc1
v2.6.0-rc1-calico
v2.6.0-rc2
v2.6.0-rc2-calico
v2.6.2
v2.6.2-calico
v3.*
v3.10.0-typha
v3.10.1-typha
v3.10.2-typha
v3.10.3-typha
v3.10.4-typha
v3.11.0-typha
v3.11.1-typha
v3.11.2-typha
v3.12.0-typha
v3.12.1-typha
v3.12.2-typha
v3.12.3-typha
v3.13.0-typha
v3.13.1-typha
v3.13.2-typha
v3.13.3-typha
v3.13.4-typha
v3.13.5-typha
v3.14.0-typha
v3.14.1-typha
v3.14.2-typha
v3.2.0-typha
v3.2.1-typha
v3.3.0-typha
v3.4.0-0.dev-typha
v3.4.0-typha
v3.4.1-typha
v3.5.0-0.dev-typha
v3.5.0-beta.0-typha
v3.5.0-typha
v3.5.1-typha
v3.6.0-0.dev-typha
v3.6.0-typha
v3.6.1-typha
v3.7.0-0.dev-typha
v3.8.0-0.dev-typha
v3.8.0-typha
v3.8.1-typha
v3.8.2-typha
v3.8.3-typha
v3.8.4-typha
v3.8.5-typha
v3.8.6-typha
v3.8.7-typha
v3.8.8-typha
v3.9.0-typha
v3.9.1-typha
v3.9.2-typha
v3.9.3-typha
v3.9.4-typha
v3.9.5-typha
v3.9.6-typha

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-13597.json"