Search for packages
| purl | pkg:deb/debian/golang-github-appc-cni@0.4.0%2Bdfsg-1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-pt4c-1gws-aaar
Aliases: CVE-2021-20206 GHSA-xjqr-g762-pxwp |
An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the system. This flaw allows an attacker to execute other existing binaries other than the cni plugins/types, such as 'reboot'. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2025-06-22T00:05:08.899562+00:00 | Debian Importer | Affected by | VCID-pt4c-1gws-aaar | None | 36.1.3 |
| 2025-06-21T04:20:00.788143+00:00 | Debian Oval Importer | Affected by | VCID-pt4c-1gws-aaar | None | 36.1.3 |
| 2025-06-08T12:36:09.824928+00:00 | Debian Oval Importer | Affected by | VCID-pt4c-1gws-aaar | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.1.0 |
| 2025-06-07T21:56:04.546467+00:00 | Debian Oval Importer | Affected by | VCID-pt4c-1gws-aaar | None | 36.1.0 |
| 2025-04-12T18:22:43.402662+00:00 | Debian Oval Importer | Affected by | VCID-pt4c-1gws-aaar | https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 | 36.0.0 |
| 2025-04-07T20:26:40.959773+00:00 | Debian Oval Importer | Affected by | VCID-pt4c-1gws-aaar | None | 36.0.0 |
| 2025-04-06T15:42:29.758366+00:00 | Debian Importer | Affected by | VCID-pt4c-1gws-aaar | https://security-tracker.debian.org/tracker/data/json | 36.0.0 |
| 2025-04-05T19:22:12.331182+00:00 | Debian Importer | Affected by | VCID-pt4c-1gws-aaar | None | 36.0.0 |
| 2025-02-19T19:14:08.382029+00:00 | Debian Importer | Affected by | VCID-pt4c-1gws-aaar | https://security-tracker.debian.org/tracker/data/json | 35.1.0 |
| 2025-02-19T19:14:06.934582+00:00 | Debian Importer | Affected by | VCID-pt4c-1gws-aaar | None | 35.1.0 |
| 2024-04-24T21:04:01.450975+00:00 | Debian Importer | Affected by | VCID-pt4c-1gws-aaar | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc4 |
| 2024-04-24T21:03:59.909280+00:00 | Debian Importer | Affected by | VCID-pt4c-1gws-aaar | None | 34.0.0rc4 |
| 2024-01-10T22:07:37.322976+00:00 | Debian Importer | Affected by | VCID-pt4c-1gws-aaar | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc2 |
| 2024-01-10T22:07:35.706412+00:00 | Debian Importer | Affected by | VCID-pt4c-1gws-aaar | None | 34.0.0rc2 |
| 2024-01-04T11:21:43.435059+00:00 | Debian Importer | Affected by | VCID-pt4c-1gws-aaar | https://security-tracker.debian.org/tracker/data/json | 34.0.0rc1 |
| 2024-01-04T11:21:41.851619+00:00 | Debian Importer | Affected by | VCID-pt4c-1gws-aaar | None | 34.0.0rc1 |