MGASA-2020-0279

Source
https://advisories.mageia.org/MGASA-2020-0279.html
Import Source
https://advisories.mageia.org/MGASA-2020-0279.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2020-0279
Related
Published
2020-07-05T15:53:52Z
Modified
2020-07-05T11:16:27Z
Summary
Updated docker packages fix security vulnerability
Details

Updated docker packages fix security vulnerability:

A flaw was found in Docker when it creates network bridges that accept IPv6 router advertisements by default. This flaw allows an attacker who can execute code in a container to possibly spoof rogue IPv6 router advertisements to perform a man-in-the-middle (MitM) attack against the host network or another container (CVE-2020-13401).

References
Credits

Affected packages

Mageia:7 / docker

Package

Name
docker
Purl
pkg:rpm/mageia/docker?distro=mageia-7

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
18.09.9-1.1.mga7

Ecosystem specific

{
    "section": "core"
}