https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:17:55 +0000 https://cve.radiocsirt.org/vuln/bell-cve-2019-9946 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Withdrawn by the publisher.</strong></p> https://cve.radiocsirt.org/vuln/bell-cve-2019-9946 https://cve.radiocsirt.org/vuln/cleanstart-2025-ig62048 <p><strong>Affected:</strong> CleanStart: containerd</p> <p>Security vulnerability affects the containerd package. Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.</p> <p><strong>Affected:</strong> CleanStart: containerd</p> <p>Security vulnerability affects the containerd package. Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.</p> https://cve.radiocsirt.org/vuln/cleanstart-2025-ig62048 https://cve.radiocsirt.org/vuln/cnvd-2019-23129 cnvd-2019-23129 https://cve.radiocsirt.org/vuln/cnvd-2019-23129 https://cve.radiocsirt.org/vuln/euvd-2026-53253 EUVD-2026-53253 https://cve.radiocsirt.org/vuln/euvd-2026-53253 https://cve.radiocsirt.org/vuln/fkie_cve-2019-9946 <p>Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI &#39;portmap&#39; plugin, used to setup HostPorts for CNI, inserts rules at the front of the iptables nat chains; which take precedence over the KUBE- SERVICES chain. Because of this, the HostPort/portmap rule could match incoming traffic even if there were better fitting, more specific service definition rules like NodePorts later in the chain. The issue is fixed in CNI 0.7.5 and Kubernetes 1.11.9, 1.12.7, 1.13.5, and 1.14.0.</p> <p>Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI &#39;portmap&#39; plugin, used to setup HostPorts for CNI, inserts rules at the front of the iptables nat chains; which take precedence over the KUBE- SERVICES chain. Because of this, the HostPort/portmap rule could match incoming traffic even if there were better fitting, more specific service definition rules like NodePorts later in the chain. The issue is fixed in CNI 0.7.5 and Kubernetes 1.11.9, 1.12.7, 1.13.5, and 1.14.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2019-9946 https://cve.radiocsirt.org/vuln/ghsa-6g96-g4m6-hw69 <p>Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI &#39;portmap&#39; plugin, used to setup HostPorts for CNI, inserts rules at the front of the iptables nat chains; which take precedence over the KUBE- SERVICES chain. Because of this, the HostPort/portmap rule could match incoming traffic even if there were better fitting, more specific service definition rules like NodePorts later in the chain. The issue is fixed in CNI 0.7.5 and Kubernetes 1.11.9, 1.12.7, 1.13.5, and 1.14.0.</p> <p>Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI &#39;portmap&#39; plugin, used to setup HostPorts for CNI, inserts rules at the front of the iptables nat chains; which take precedence over the KUBE- SERVICES chain. Because of this, the HostPort/portmap rule could match incoming traffic even if there were better fitting, more specific service definition rules like NodePorts later in the chain. The issue is fixed in CNI 0.7.5 and Kubernetes 1.11.9, 1.12.7, 1.13.5, and 1.14.0.</p> https://cve.radiocsirt.org/vuln/ghsa-6g96-g4m6-hw69 https://cve.radiocsirt.org/vuln/gsd-2019-9946 gsd-2019-9946 https://cve.radiocsirt.org/vuln/gsd-2019-9946 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10884-1 <p>k3s-1.21.3+k3s1-1.2 on GA media</p> <p>k3s-1.21.3+k3s1-1.2 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10884-1 https://cve.radiocsirt.org/vuln/rhba-2019:0862 <p>kubernetes: Incorrect rule injection in CNI portmap plugin</p> <p>kubernetes: Incorrect rule injection in CNI portmap plugin</p> https://cve.radiocsirt.org/vuln/rhba-2019:0862 https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9946 <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: kubernetes, Ubuntu:22.04:LTS: kubernetes, Ubuntu:24.04:LTS: kubernetes</p> <p>Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI &#39;portmap&#39; plugin, used to setup HostPorts for CNI, inserts rules at the front of the iptables nat chains; which take precedence over the KUBE- SERVICES chain. Because of this, the HostPort/portmap rule could match incoming traffic even if there were better fitting, more specific service definition rules like NodePorts later in the chain. The issue is fixed in CNI 0.7.5 and Kubernetes 1.11.9, 1.12.7, 1.13.5, and 1.14.0.</p> <p><strong>Withdrawn by the publisher.</strong></p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: kubernetes, Ubuntu:22.04:LTS: kubernetes, Ubuntu:24.04:LTS: kubernetes</p> <p>Cloud Native Computing Foundation (CNCF) CNI (Container Networking Interface) 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI &#39;portmap&#39; plugin, used to setup HostPorts for CNI, inserts rules at the front of the iptables nat chains; which take precedence over the KUBE- SERVICES chain. Because of this, the HostPort/portmap rule could match incoming traffic even if there were better fitting, more specific service definition rules like NodePorts later in the chain. The issue is fixed in CNI 0.7.5 and Kubernetes 1.11.9, 1.12.7, 1.13.5, and 1.14.0.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2019-9946