Arbitrary Path Injection

🗓️ 08 Feb 2021 06:36:34Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 20 Views

Vulnerability in github.com/containernetworking/cni, allows arbitrary path injection and execution of binaries

Reporter	Title	Published	Views	Family All 100
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities affect IBM® Db2® On Openshift and IBM® Db2® and Db2 Warehouse® on Cloud Pak for Data	29 Jun 202217:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Edge Application Manager 4.5 addresses multiple security vulnerabilities	31 May 202305:42	–	ibm
AlpineLinux	CVE-2021-20206	26 Mar 202121:34	–	alpinelinux
AstraLinux	Astra Linux - уязвимость в golang-github-appc-cni	20 May 202605:53	–	astralinux
CBLMariner	CVE-2021-20206 affecting package buildah for versions less than 1.41.4-2	28 Oct 202521:13	–	cbl_mariner
CNNVD	Cloud Native Computing Foundation CNI Path Traversal Vulnerability	5 Feb 202100:00	–	cnnvd
CVE	CVE-2021-20206	26 Mar 202121:34	–	cve
Cvelist	CVE-2021-20206	26 Mar 202121:34	–	cvelist
Debian CVE	CVE-2021-20206	26 Mar 202121:34	–	debiancve
EUVD	EUVD-2022-1255	3 Oct 202520:07	–	euvd

Vulners

Node

buildah_project buildahMatch1.14.9-r0go

AND

buildah_project buildahMatch1.14.2-r0go

AND

buildah_project buildahMatch1.14.1-r0go

AND

buildah_project buildahMatch1.14.5-r0go

AND

buildah_project buildahMatch1.14.4-r0go

AND

buildah_project buildahMatch1.14.8-r1go

AND

buildah_project buildahMatch1.14.3-r0go

AND

buildah_project buildahMatch1.14.6-r0go

AND

buildah_project buildahMatch1.14.8-r0go

AND

alpinelinux alpine_linuxMatchedge

OR

containernetworking github.com/containernetworking/cniRangev0.1.0–0.1.0go

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.3_4.module_el8.3.0+479+69e2ae26

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.6_3.rhaos4.6.el7

OR

containernetworking-plugins containernetworking-pluginsMatch0.9.0_1.module_el8.4.0+641+6116a774

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.2_2.el8

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.6_1.rhaos4.3.el8

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.3_4.module_el8.1.0+292+7d7c672e

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.1_1.module+el8.1.0+3402+f73c5901

OR

containernetworking-plugins containernetworking-pluginsMatch1.0.1_1.module_el8.6.0+944+d413f95e

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.3_4.module_el8.2.0+304+65a3c2ac

OR

containernetworking-plugins containernetworking-pluginsMatch0.9.1_1.module_el8.5.0+877+1c30e0c9

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.6_1.rhaos4.2.el8

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.3_5.module_el8.2.0+305+5e198a41

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.3_5.module_el8.1.0+293+ad8ef41f

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.6_1.module_el8.3.0+401+88d810c7

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.1_1.el7.centos

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.1_4.el7

OR

containernetworking-plugins containernetworking-pluginsMatch0.9.1_1.module_el8.4.0+786+4668b267

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.3_1.el8

OR

containernetworking-plugins containernetworking-pluginsMatch0.7.4_3.git9ebe139.module_el8.0.0+58+91b614e7

OR

containernetworking-plugins containernetworking-pluginsMatch0.7.4_3.git9ebe139.module_el8.1.0+236+34fc7673

OR

containernetworking-plugins containernetworking-pluginsMatch0.7.5_2.el7.centos

OR

containernetworking-plugins containernetworking-pluginsMatch0.7.0_101.el7

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.3_1.el7

OR

containernetworking-plugins containernetworking-pluginsMatch0.9.1_1.rhaos4.10.el8

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.7_2.module_el8.4.0+575+63b40ad7

OR

containernetworking-plugins containernetworking-pluginsMatch0.7.4_4.git9ebe139.module_el8.1.0+299+10c6b3e0

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.6_2.rhaos4.5.el8

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.3_4.module_el8.5.0+1004+c00a74f5

OR

containernetworking-plugins containernetworking-pluginsMatch0.7.4_3.git9ebe139.module_el8.0.0+57+bb81156c

OR

containernetworking-plugins containernetworking-pluginsMatch0.9.1_1.module_el8.5.0+733+9bb5dffa

OR

containernetworking-plugins containernetworking-pluginsMatch0.7.1_1.el7

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.1_2.el7.centos

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.6_1.rhaos4.5.el7

OR

containernetworking-plugins containernetworking-pluginsMatch0.9.1_1.module_el8.4.0+781+acf4c33b

OR

containernetworking-plugins containernetworking-pluginsMatch0.7.4_4.git9ebe139.module_el8.4.0+521+9df8e6d3

OR

containernetworking-plugins containernetworking-pluginsMatch0.7.4_4.git9ebe139.module_el8.3.0+569+1bada2e4

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.6_1.rhaos4.4.el7

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.6_1.rhaos4.3.el7

OR

containernetworking-plugins containernetworking-pluginsMatch0.9.1_1.module_el8.5.0+1006+8d0e68a2

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.1_4.el7.centos

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.6_2.rhaos4.5.el7

OR

containernetworking-plugins containernetworking-pluginsMatch0.5.2_6.el7

OR

containernetworking-plugins containernetworking-pluginsMatch0.7.0_4.gitb51d327.el7

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.3_4.module_el8.1.0+298+41f9343a

OR

containernetworking-plugins containernetworking-pluginsMatch0.7.4_3.git9ebe139.module_el8.2.0+303+1105185b

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.6_3.rhaos4.6.el8

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.2_3.el7

OR

containernetworking-plugins containernetworking-pluginsMatch0.5.2_5.el7

OR

containernetworking-plugins containernetworking-pluginsMatch0.7.3_2.el7

OR

containernetworking-plugins containernetworking-pluginsMatch0.5.2_4.el7

OR

containernetworking-plugins containernetworking-pluginsMatch0.9.1_1.module_el8.5.0+736+58cc1a5a

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.6_1.rhaos4.4.el8

OR

containernetworking-plugins containernetworking-pluginsMatch1.0.0_1.module_el8.6.0+926+8bef8ae7

OR

containernetworking-plugins containernetworking-pluginsMatch0.7.4_3.git9ebe139.module_el8.1.0+294+988780c8

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.3_4.module_el8.4.0+522+66908d0c

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.1_2.module_el8.1.0+237+63e26edc

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.6_2.module_el8.3.0+475+c50ce30b

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.3_3.el7.centos

OR

containernetworking-plugins containernetworking-pluginsMatch1.0.0_1.module_el8.5.0+890+6b136101

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.3_4.module_el8.1.0+272+3e64ee36

OR

containernetworking-plugins containernetworking-pluginsMatch0.7.4_1.el7

OR

containernetworking-plugins containernetworking-pluginsMatch0.9.0_1.module_el8.3.0+699+d61d9c41

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.6_1.rhaos4.5.el8

OR

containernetworking-plugins containernetworking-pluginsMatch0.8.6_1.rhaos4.2.el7

OR

containernetworking-plugins containernetworking-pluginsMatch0.9.0_1.module_el8.4.0+581+8bd31022

OR

containernetworking-plugins containernetworking-pluginsMatch1.0.1_1.module_el8.6.0+1108+b13568aa

OR

containernetworking-plugins containernetworking-pluginsMatch1.1.1_1.module_el8.7.0+1106+45480ee0

OR

containernetworking-plugins containernetworking-pluginsMatch0.9.1_2.rhaos4.10.el8

OR

containernetworking-plugins containernetworking-pluginsMatch0.9.1_1.module_el8.6.0+1107+d59a301b

OR

buildah_project buildahMatch0.16_3.git532e267.el7

OR

buildah_project buildahMatch1.23.1_2.module_el8.6.0+954+963caf36

OR

buildah_project buildahMatch1.5_8.gite94b4f9.module_el8.4.0+521+9df8e6d3

OR

buildah_project buildahMatch1.9.0_2.el7.centos

OR

buildah_project buildahMatch1.21.4_2.module_el8.4.0+942+d25aada8

OR

buildah_project buildahMatch1.19.7_1.module_el8.4.0+786+4668b267

OR

buildah_project buildahMatch1.22.3_2.module_el8.6.0+926+8bef8ae7

OR

buildah_project buildahMatch1.5_6.gite94b4f9.module_el8.1.0+299+10c6b3e0

OR

buildah_project buildahMatch1.19.8_1.module_el8.5.0+733+9bb5dffa

OR

buildah_project buildahMatch1.21.4_1.module_el8.4.0+886+c9a8d9ad

OR

buildah_project buildahMatch1.11.6_4.module_el8.1.0+293+ad8ef41f

OR

buildah_project buildahMatch1.16.5_4.module_el8.4.0+575+63b40ad7

OR

buildah_project buildahMatch1.11.6_4.el8

OR

buildah_project buildahMatch1.11.6_8.module_el8.3.0+479+69e2ae26

OR

buildah_project buildahMatch1.5_5.gite94b4f9.module_el8.1.0+236+34fc7673

OR

buildah_project buildahMatch1.7.1_2.git93747b1.el7.centos

OR

buildah_project buildahMatch1.11.6_9.module_el8.5.0+1004+c00a74f5

OR

buildah_project buildahMatch1.11.6_7.module_el8.2.0+305+5e198a41

OR

buildah_project buildahMatch1.1_1.gitfbf46d3.el7

OR

buildah_project buildahMatch1.22.0_2.module_el8.5.0+877+1c30e0c9

OR

buildah_project buildahMatch1.15.1_2.module_el8.3.0+475+c50ce30b

OR

buildah_project buildahMatch1.11.6_5.el8

OR

buildah_project buildahMatch1.8.2_2.gite23314b.el7.centos

OR

buildah_project buildahMatch1.19.7_2.module_el8.4.0+830+8027e1c4

OR

buildah_project buildahMatch0.15_1.gitd1330a5.el7

OR

buildah_project buildahMatch1.16.7_4.module_el8.3.0+699+d61d9c41

OR

buildah_project buildahMatch1.11.6_7.rhaos4.4.el8

OR

buildah_project buildahMatch1.5_3.gite94b4f9.module_el8.0.0+57+bb81156c

OR

buildah_project buildahMatch1.4_3.gitc8ed967.el7

OR

buildah_project buildahMatch1.16.7_1.module_el8.4.0+581+8bd31022

OR

buildah_project buildahMatch1.22.3_2.module_el8.5.0+911+f19012f9

OR

buildah_project buildahMatch1.7_2.git873f001.el7

OR

buildah_project buildahMatch1.15.0_1.module_el8.3.0+432+2e9cbcd8

OR

buildah_project buildahMatch1.5_2.gite94b4f9.el7.centos

OR

buildah_project buildahMatch1.11.6_8.el7_8

OR

buildah_project buildahMatch1.11.6_11.el7_8

OR

buildah_project buildahMatch1.5_4.gite94b4f9.module_el8.2.0+303+1105185b

OR

buildah_project buildahMatch1.22.0_2.module_el8.5.0+890+6b136101

OR

buildah_project buildahMatch1.11.6_8.rhaos4.5.el8

OR

buildah_project buildahMatch1.19.0_2.module_el8.4.0+641+6116a774

OR

buildah_project buildahMatch1.9.0_1.el7.centos

OR

buildah_project buildahMatch1.8.1_1.git57b4288.el7

OR

buildah_project buildahMatch1.21.4_2.module_el8.5.0+870+f792de72

OR

buildah_project buildahMatch1.7.1_2.git93747b1.el7

OR

buildah_project buildahMatch1.5_3.gite94b4f9.module_el8.1.0+294+988780c8

OR

buildah_project buildahMatch1.19.3_1.module_el8.4.0+673+eabfc99d

OR

buildah_project buildahMatch1.19.9_1.module_el8.5.0+1006+8d0e68a2

OR

buildah_project buildahMatch1.11.6_7.module_el8.2.0+458+dab581ed

OR

buildah_project buildahMatch1.19.7_1.module_el8.5.0+736+58cc1a5a

OR

buildah_project buildahMatch1.11.6_4.module_el8.1.0+292+7d7c672e

OR

buildah_project buildahMatch1.22.3_1.module_el8.5.0+901+79ce9cba

OR

buildah_project buildahMatch1.24.0_0.7.module_el8.6.0+944+d413f95e

OR

buildah_project buildahMatch1.22.0_0.2.module_el8.5.0+874+6db8bee3

OR

buildah_project buildahMatch1.2_2.gitbe87762.el7

OR

buildah_project buildahMatch1.11.2_2.git0bafbfe.el7

OR

buildah_project buildahMatch1.9.0_5.module_el8.1.0+237+63e26edc

OR

buildah_project buildahMatch1.5_8.gite94b4f9.module_el8.3.0+569+1bada2e4

OR

buildah_project buildahMatch1.5_3.gite94b4f9.module_el8.0.0+58+91b614e7

OR

buildah_project buildahMatch1.11.6_6.rhaos4.3.el8

OR

buildah_project buildahMatch1.11.6_6.rhaos4.4.el8

OR

buildah_project buildahMatch1.19.7_1.el8

OR

buildah_project buildahMatch1.11.6_8.module_el8.4.0+522+66908d0c

OR

buildah_project buildahMatch1.11.6_4.module_el8.1.0+272+3e64ee36

OR

buildah_project buildahMatch1.11.6_6.module_el8.1.0+298+41f9343a

OR

buildah_project buildahMatch1.19.7_1.module_el8.4.0+781+acf4c33b

OR

buildah_project buildahMatch1.11.6_6.module_el8.2.0+304+65a3c2ac

OR

buildah_project buildahMatch1.11.6_9.rhaos4.5.el8

OR

buildah_project buildahMatch0.11_3.git49095a8.el7

OR

buildah_project buildahMatch1.19.7_2.el8

OR

buildah_project buildahMatch1.19.9_1.el8

OR

buildah_project buildahMatch1.19.9_1.module_el8.6.0+1107+d59a301b

OR

buildah_project buildahMatch1.24.2_2.module_el8.7.0+1106+45480ee0

OR

buildah_project buildahMatch1.24.2_2.module_el8.6.0+1108+b13568aa

OR

podman_project podmanMatch1.0.0_6.git921f98f.module_el8.4.0+521+9df8e6d3

OR

podman_project podmanMatch1.6.4_2.module_el8.1.0+272+3e64ee36

OR

podman_project podmanMatch1.0.0_3.git921f98f.module_el8.1.0+294+988780c8

OR

podman_project podmanMatch1.0.0_4.git921f98f.module_el8.1.0+299+10c6b3e0

OR

podman_project podmanMatch2.0.5_4.module_el8.3.0+491+298e1ad1

OR

podman_project podmanMatch0.9.2_5.git37a2afe.el7_5

OR

podman_project podmanMatch1.6.4_12.rhaos4.4.el8

OR

podman_project podmanMatch0.4.1_4.gitb51d327.el7

OR

podman_project podmanMatch1.6.4_22.el7_9

OR

podman_project podmanMatch1.6.4_1.module_el8.1.0+292+7d7c672e

OR

podman_project podmanMatch1.6.4_11.rhaos4.3.el8

OR

podman_project podmanMatch2.2.1_2.module_el8.4.0+581+8bd31022

OR

podman_project podmanMatch1.4.2_5.el8

OR

podman_project podmanMatch2.0.5_5.module_el8.3.0+512+b3b58dca

OR

podman_project podmanMatch1.6.4_13.rhaos4.5.el8

OR

podman_project podmanMatch1.0.2_1.dev.git96ccc2e.el8

OR

podman_project podmanMatch1.0.0_2.git921f98f.module_el8.0.0+57+bb81156c

OR

podman_project podmanMatch1.0.0_2.git921f98f.module_el8.0.0+58+91b614e7

OR

podman_project podmanMatch2.0.0_0.9.rc7.module_el8.3.0+432+2e9cbcd8

OR

podman_project podmanMatch1.0.0_3.git921f98f.el7

OR

podman_project podmanMatch1.6.4_4.module_el8.1.0+298+41f9343a

OR

podman_project podmanMatch1.5.1_3.el7

OR

podman_project podmanMatch1.4.4_4.el7.centos

OR

podman_project podmanMatch1.6.4_21.module_el8.3.0+492+3f3e159a

OR

podman_project podmanMatch0.6.1_3.git3e0ff12.el7

OR

podman_project podmanMatch0.12.1.2_2.git9551f6b.el7.centos

OR

podman_project podmanMatch1.6.4_10.module_el8.2.0+304+65a3c2ac

OR

podman_project podmanMatch1.9.3_2.rhaos4.5.el8

OR

podman_project podmanMatch1.9.3_3.rhaos4.6.el8

OR

podman_project podmanMatch1.6.4_29.el7_9

OR

podman_project podmanMatch1.0.2_4.dev.git96ccc2e.rhaos4.1.el8

OR

podman_project podmanMatch0.7.3_1.git0791210.el7

OR

podman_project podmanMatch1.3.2_1.git14fdcd0.el7.centos

OR

podman_project podmanMatch1.6.4_13.rhaos4.4.el8

OR

podman_project podmanMatch1.6.4_16.el7_8

OR

podman_project podmanMatch0.11.1.1_3.git594495d.el7.centos

OR

podman_project podmanMatch1.6.4_18.el7_8

OR

podman_project podmanMatch1.6.4_23.module_el8.3.0+566+4759265c

OR

podman_project podmanMatch1.2_2.git3bd528e.el7

OR

podman_project podmanMatch1.0.0_6.git921f98f.module_el8.3.0+569+1bada2e4

OR

podman_project podmanMatch1.4.4_2.el7.centos

OR

podman_project podmanMatch1.9.3_1.rhaos4.4.el8

OR

podman_project podmanMatch1.6.4_1.el8

OR

podman_project podmanMatch1.4.2_6.rhaos4.2.el8

OR

podman_project podmanMatch1.0.0_4.git921f98f.module_el8.2.0+303+1105185b

OR

podman_project podmanMatch1.6.4_15.module_el8.2.0+465+f9348e8f

OR

podman_project podmanMatch1.0.2_3.dev.git96ccc2e.el8_0

OR

podman_project podmanMatch1.0.5_1.gitf604175.module_el8.0.0+194+ac560166

OR

podman_project podmanMatch3.0.1_7.rhaos4.10.el8

OR

podman_project podmanMatch1.6.4_23.module_el8.4.0+522+66908d0c

OR

podman_project podmanMatch1.6.4_7.el8

OR

podman_project podmanMatch1.6.4_10.module_el8.2.0+305+5e198a41

OR

podman_project podmanMatch1.6.4_14.rhaos4.5.el8

OR

podman_project podmanMatch1.9.3_4.rhaos4.6.el8

OR

podman_project podmanMatch1.0.2_2.dev.git96ccc2e.el8

OR

podman_project podmanMatch1.6.4_10.rhaos4.3.el8

OR

podman_project podmanMatch2.1.1_3.module_el8.4.0+575+63b40ad7

OR

podman_project podmanMatch1.6.4_27.el7_9

OR

podman_project podmanMatch3.0.1_6.el8

OR

podman_project podmanMatch1.4.2_5.module_el8.1.0+237+63e26edc

OR

podman_project podmanMatch1.0.0_3.git921f98f.module_el8.1.0+236+34fc7673

OR

podman_project podmanMatch1.9.3_1.rhaos4.5.el8

OR

podman_project podmanMatch1.0.0_6.git921f98f.module_el8.4.0+653+7095eaa9

OR

podman_project podmanMatch3.0.1_9.rhaos4.10.el8

OR

podman_project podmanMatch1.6.4_32.el7_9

OR

podman_project podmanMatch3.2.3_1.rhaos4.7.el8

OR

podman_project podmanMatch3.2.3_1.rhaos4.9.el8

OR

podman_project podmanMatch3.2.3_1.rhaos4.10.el8

Source	Link
github	www.github.com/containernetworking/cni/pull/808
bugzilla	www.bugzilla.redhat.com/show_bug.cgi

07 Nov 2023 23:21Current

2.8Low risk

Vulners AI Score2.8

CVSS 26.5

CVSS 3.17.2

EPSS0.00121

containernetworking arbitrary path binary execution vulnerability cni configuration