CVE-2020-13597

Calico and Calico Enterprise clusters are affected (Calico ≤ 3.14.0; Calico Enterprise ≤ 2.8.2). The root cause is improper validation of IPv6 router advertisements, allowing a compromised privileged pod to reconfigure the node’s IPv6 interface because the node accepts route advertisements by def...