containernetworking-plugins vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the containernetworking-plugins package. This does not include vulnerabilities belonging to this package’s dependencies.

How to fix?

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Fix for free

Vulnerability	Vulnerable Version
M Directory Traversal	<1:1.4.0-5.module+el8.10.0+90449+0b7c8529
M Information Exposure	<1:1.4.0-5.module+el8.10.0+90449+0b7c8529
H Improper Input Validation	<1:1.4.0-5.module+el8.10.0+90429+ee702c5c
H Link Following	<1:1.4.0-5.module+el8.10.0+90429+ee702c5c
H Directory Traversal	<1:1.4.0-5.module+el8.10.0+90429+ee702c5c
H CVE-2024-34158	<1:1.4.0-5.module+el8.10.0+90416+5b0f6a17
H CVE-2024-34156	<1:1.4.0-5.module+el8.10.0+90416+5b0f6a17
H CVE-2024-34155	<1:1.4.0-5.module+el8.10.0+90416+5b0f6a17
M CVE-2024-24791	<1:1.4.0-5.module+el8.10.0+90412+9b361f34
M CVE-2024-24788	<1:1.4.0-5.module+el8.10.0+90412+9b361f34
H Information Exposure Through Log Files	<1:1.4.0-5.module+el8.10.0+90384+a78ffc57
H Improper Validation of Integrity Check Value	<1:1.4.0-5.module+el8.10.0+90384+a78ffc57
H CVE-2023-45290	<1:1.4.0-5.module+el8.10.0+90416+5b0f6a17
H CVE-2024-24789	<1:1.4.0-5.module+el8.10.0+90384+a78ffc57
M CVE-2024-24783	<1:1.4.0-5.module+el8.10.0+90412+9b361f34
H Memory Leak	<1:1.4.0-5.module+el8.10.0+90384+a78ffc57
H CVE-2024-37298	<1:1.4.0-5.module+el8.10.0+90384+a78ffc57
M CVE-2024-24784	<1:1.4.0-5.module+el8.10.0+90412+9b361f34
M CVE-2024-28176	<1:1.4.0-2.module+el8.10.0+90298+77a9814d
H CVE-2024-24786	<1:1.4.0-2.module+el8.10.0+90298+77a9814d
M CVE-2024-28180	<1:1.4.0-2.module+el8.10.0+90298+77a9814d
M Information Exposure	<1:1.4.0-2.module+el8.10.0+90298+77a9814d
M Open Redirect	<1:1.4.0-2.module+el8.10.0+90298+77a9814d
M CVE-2021-33198	<1:1.4.0-5.module+el8.10.0+90449+0b7c8529
M Improper Check for Unusual or Exceptional Conditions	<1:1.4.0-2.module+el8.10.0+90298+77a9814d
M Improper Certificate Validation	<1:1.4.0-2.module+el8.10.0+90298+77a9814d
M Improper Validation of Integrity Check Value	<1:1.4.0-2.module+el8.10.0+90298+77a9814d
H Link Following	<1:1.4.0-2.module+el8.10.0+90298+77a9814d
M CVE-2023-39326	<1:1.1.1-6.module+el8.9.0+90165+ead7974e
M Information Exposure	<1:1.4.0-2.module+el8.10.0+90298+77a9814d
H Exposure of Resource to Wrong Sphere	<1:1.1.1-6.module+el8.9.0+90148+6046e3c3
M Allocation of Resources Without Limits or Throttling	<1:1.4.0-2.module+el8.10.0+90298+77a9814d
H HTTP Request Smuggling	<1:1.4.0-2.module+el8.10.0+90298+77a9814d
H CVE-2022-41715	<1:1.4.0-2.module+el8.10.0+90298+77a9814d
M Resource Exhaustion	<1:1.4.0-2.module+el8.10.0+90298+77a9814d
M Allocation of Resources Without Limits or Throttling	<1:1.4.0-2.module+el8.10.0+90298+77a9814d
M Cross-site Scripting (XSS)	<1:1.4.0-2.module+el8.10.0+90298+77a9814d
M CVE-2023-39321	<1:1.4.0-2.module+el8.10.0+90298+77a9814d
M Cross-site Scripting (XSS)	<1:1.4.0-2.module+el8.10.0+90298+77a9814d
M Incorrect Authorization	<1:1.3.0-4.module+el8.9.0+90021+ce997450
M Arbitrary Code Injection	<1:1.3.0-4.module+el8.9.0+90021+ce997450
M Interpretation Conflict	<1:1.1.1-5.module+el8.9.0+90086+8f2d6fb1
M Resource Exhaustion	<1:1.3.0-4.module+el8.9.0+90021+ce997450
M Resource Exhaustion	<1:1.3.0-4.module+el8.9.0+90021+ce997450
M Allocation of Resources Without Limits or Throttling	<1:1.3.0-4.module+el8.9.0+90021+ce997450
M Resource Exhaustion	<1:1.1.1-5.module+el8.9.0+90044+a34bc939
M CVE-2023-24540	<1:1.1.1-5.module+el8.9.0+90044+a34bc939
M CVE-2022-41723	<1:1.3.0-4.module+el8.9.0+90021+ce997450
M Arbitrary Code Injection	<1:1.3.0-4.module+el8.9.0+90021+ce997450
M Integer Overflow or Wraparound	<1:1.3.0-4.module+el8.9.0+90021+ce997450
M Cross-site Scripting (XSS)	<1:1.3.0-4.module+el8.9.0+90021+ce997450
M Arbitrary Code Injection	<1:1.3.0-4.module+el8.9.0+90021+ce997450
M Allocation of Resources Without Limits or Throttling	<1:1.1.1-5.module+el8.9.0+90044+a34bc939
H Use of Incorrectly-Resolved Name or Reference	<1:1.2.0-1.module+el8.8.0+21045+adcb6a64
H Link Following	<1:1.2.0-1.module+el8.8.0+21045+adcb6a64
H Improper Preservation of Permissions	<1:1.2.0-1.module+el8.8.0+21045+adcb6a64
M Time-of-check Time-of-use (TOCTOU)	<1:1.1.1-2.module+el8.8.0+20984+ab6ce66c
M Allocation of Resources Without Limits or Throttling	<1:1.1.1-2.module+el8.8.0+20984+ab6ce66c
M Placement of User into Incorrect Group	<1:1.1.1-2.module+el8.8.0+20984+ab6ce66c
M Race Condition	<1:1.1.1-3.module+el8.7.0+20873+328b8baa
L Placement of User into Incorrect Group	<1:1.1.1-3.module+el8.7.0+20877+e0f9ac15
M Incorrect Default Permissions	<1:1.1.1-3.module+el8.7.0+20873+328b8baa
M Access of Resource Using Incompatible Type ('Type Confusion')	<1:1.1.1-3.module+el8.7.0+20873+328b8baa
M CVE-2022-27191	<1:1.1.1-3.module+el8.7.0+20873+328b8baa
M CVE-2022-27664	<1:1.1.1-2.module+el8.8.0+20984+ab6ce66c
M CVE-2022-32189	<1:1.2.0-1.module+el8.8.0+21045+adcb6a64
M Allocation of Resources Without Limits or Throttling	<0:0.9.1-1.module+el8.7.0+20785+0180d035
M Uncontrolled Recursion	<1:1.2.0-1.module+el8.8.0+21045+adcb6a64
M Uncontrolled Recursion	<1:1.1.1-2.module+el8.8.0+20984+ab6ce66c
M CVE-2022-32148	<1:1.2.0-1.module+el8.8.0+21045+adcb6a64
M Uncontrolled Recursion	<1:1.1.1-2.module+el8.8.0+20984+ab6ce66c
M Uncontrolled Recursion	<1:1.1.1-2.module+el8.8.0+20984+ab6ce66c
M HTTP Request Smuggling	<1:1.1.1-2.module+el8.8.0+20984+ab6ce66c
M Uncontrolled Recursion	<1:1.1.1-2.module+el8.8.0+20984+ab6ce66c
M Uncontrolled Recursion	<1:1.2.0-1.module+el8.8.0+21045+adcb6a64
M Uncontrolled Recursion	<1:1.1.1-2.module+el8.8.0+20984+ab6ce66c
M Use of Insufficiently Random Values	<1:1.2.0-1.module+el8.8.0+21045+adcb6a64
M Incorrect Default Permissions	<0:0.9.1-1.module+el8.6.0+20652+6ea35e6f
M Allocation of Resources Without Limits or Throttling	<0:0.9.1-1.module+el8.7.0+20785+0180d035
H Improper Privilege Management	<1:1.0.1-2.module+el8.6.0+20656+53f7e955
H Incorrect Default Permissions	<1:1.0.1-2.module+el8.6.0+20656+53f7e955
H Incorrect Default Permissions	<1:1.0.1-2.module+el8.6.0+20656+53f7e955
M Improper Cross-boundary Removal of Sensitive Data	<0:0.9.1-1.module+el8.5.0+20341+152f6d53
M Improper Locking	<0:1.0.0-1.module+el8.5.0+20416+d687fed7
M Origin Validation Error	<0:0.9.1-1.module+el8.4.0+20157+b6591bfb
M NULL Pointer Dereference	<0:0.9.1-1.module+el8.4.0+20157+b6591bfb
H Race Condition	<0:0.8.3-4.0.1.module+el8.4.0+20172+38c78bba
H Incorrect Authorization	<0:0.7.4-4.git9ebe139.module+el8.3.0+9668+293abd4d
M Improper Cross-boundary Removal of Sensitive Data	<0:0.9.0-1.module+el8.3.1+9659+c1901784
M CVE-2020-10749	<0:0.8.6-2.module+el8.3.0+7866+f387f528
M Out-of-bounds Read	<0:0.8.6-2.module+el8.3.0+7866+f387f528
M Loop with Unreachable Exit Condition ('Infinite Loop')	<0:0.8.6-2.module+el8.3.0+7866+f387f528
M Use After Free	<0:0.8.6-1.module+el8.2.1+7658+86e51d52
H Directory Traversal	<0:0.7.4-3.git9ebe139.module+el8.2.0+7621+b33f33e5
M Use of Incorrectly-Resolved Name or Reference	<0:0.8.3-5.0.1.module+el8.2.0+5584+b2b2d3fb
M Files or Directories Accessible to External Parties	<0:0.8.3-5.0.1.module+el8.2.0+5584+b2b2d3fb
M Resource Exhaustion	<0:0.8.3-5.0.1.module+el8.2.0+5584+b2b2d3fb
H Buffer Overflow	<0:0.8.3-4.0.1.module+el8.1.1+5502+fbec5cc6
H Out-of-bounds Write	<0:0.8.3-4.0.1.module+el8.1.1+5502+fbec5cc6
H Incorrect Authorization	<0:0.8.1-3.0.1.module+el8.1.0+5460+5d763c32
H Improper Handling of Exceptional Conditions	<0:0.7.4-3.git9ebe139.module+el8.1.0+5440+42cffa37
H Insufficiently Protected Credentials	<0:0.7.4-3.git9ebe139.module+el8.1.0+5440+42cffa37
H Allocation of Resources Without Limits or Throttling	<0:0.8.1-3.0.1.module+el8.1.0+5460+5d763c32
H Resource Exhaustion	<0:0.7.4-4.git9ebe139.module+el8.1.0+5459+24f6812a
H OS Command Injection	<0:0.7.4-3.git9ebe139.module+el8.0.0+5215+77f672ad

Vulnerability

Vulnerable Version

Directory Traversal

<1:1.4.0-5.module+el8.10.0+90449+0b7c8529

Information Exposure

<1:1.4.0-5.module+el8.10.0+90449+0b7c8529

Improper Input Validation

<1:1.4.0-5.module+el8.10.0+90429+ee702c5c

Link Following

<1:1.4.0-5.module+el8.10.0+90429+ee702c5c

Directory Traversal

<1:1.4.0-5.module+el8.10.0+90429+ee702c5c

CVE-2024-34158

<1:1.4.0-5.module+el8.10.0+90416+5b0f6a17

CVE-2024-34156

<1:1.4.0-5.module+el8.10.0+90416+5b0f6a17

CVE-2024-34155

<1:1.4.0-5.module+el8.10.0+90416+5b0f6a17

CVE-2024-24791

<1:1.4.0-5.module+el8.10.0+90412+9b361f34

CVE-2024-24788

<1:1.4.0-5.module+el8.10.0+90412+9b361f34

Information Exposure Through Log Files

<1:1.4.0-5.module+el8.10.0+90384+a78ffc57

Improper Validation of Integrity Check Value

<1:1.4.0-5.module+el8.10.0+90384+a78ffc57

CVE-2023-45290

<1:1.4.0-5.module+el8.10.0+90416+5b0f6a17

CVE-2024-24789

<1:1.4.0-5.module+el8.10.0+90384+a78ffc57

CVE-2024-24783

<1:1.4.0-5.module+el8.10.0+90412+9b361f34

Memory Leak

<1:1.4.0-5.module+el8.10.0+90384+a78ffc57

CVE-2024-37298

<1:1.4.0-5.module+el8.10.0+90384+a78ffc57

CVE-2024-24784

<1:1.4.0-5.module+el8.10.0+90412+9b361f34

CVE-2024-28176