Search for packages
| purl | pkg:deb/debian/golang-github-appc-cni@0.3.0%2Bdfsg-1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-pt4c-1gws-aaar
Aliases: CVE-2021-20206 GHSA-xjqr-g762-pxwp |
An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the system. This flaw allows an attacker to execute other existing binaries other than the cni plugins/types, such as 'reboot'. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-22T00:05:08.897557+00:00 | Debian Importer | Affected by | VCID-pt4c-1gws-aaar | None | 36.1.3 |
| 2025-06-21T04:20:00.785842+00:00 | Debian Oval Importer | Affected by | VCID-pt4c-1gws-aaar | None | 36.1.3 |
| 2025-06-08T12:36:09.821819+00:00 | Debian Oval Importer | Affected by | VCID-pt4c-1gws-aaar | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-07T21:56:04.544710+00:00 | Debian Oval Importer | Affected by | VCID-pt4c-1gws-aaar | None | 36.1.0 |
| 2025-04-12T18:22:43.397650+00:00 | Debian Oval Importer | Affected by | VCID-pt4c-1gws-aaar | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-07T20:26:40.954728+00:00 | Debian Oval Importer | Affected by | VCID-pt4c-1gws-aaar | None | 36.0.0 |
| 2025-04-05T19:22:12.326062+00:00 | Debian Importer | Affected by | VCID-pt4c-1gws-aaar | None | 36.0.0 |
| 2025-02-19T19:14:09.066261+00:00 | Debian Importer | Affected by | VCID-pt4c-1gws-aaar | None | 35.1.0 |
| 2024-04-24T21:04:02.218944+00:00 | Debian Importer | Affected by | VCID-pt4c-1gws-aaar | None | 34.0.0rc4 |
| 2024-01-10T22:07:38.121495+00:00 | Debian Importer | Affected by | VCID-pt4c-1gws-aaar | None | 34.0.0rc2 |
| 2024-01-04T11:21:44.242914+00:00 | Debian Importer | Affected by | VCID-pt4c-1gws-aaar | None | 34.0.0rc1 |