CVE-2020-13597
Last modified
CVE-2020-13597 is a low-severity vulnerability rated 3.5/10 on the CVSS scale. Clusters using Calico (version 3.14.0 and below), Calico Enterprise (version 2.8.2 and below), may be vulnerable to information disclosure if IPv6 is enabled but unused. A compromised pod with sufficient privilege is able to reconfigure the node’s IPv6 interface due to the node accepting route advertisement by default, allowing the attacker to redirect full or partial network traffic from the node to the compromised pod.. EPSS estimates a 0.90% chance of exploitation in the next 30 days.
Description
Clusters using Calico (version 3.14.0 and below), Calico Enterprise (version 2.8.2 and below), may be vulnerable to information disclosure if IPv6 is enabled but unused. A compromised pod with sufficient privilege is able to reconfigure the node’s IPv6 interface due to the node accepting route advertisement by default, allowing the attacker to redirect full or partial network traffic from the node to the compromised pod.
Metrics
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Projectcalico | Calico | <= 2.6.2 |
| Projectcalico | Calico | <= 3.8.8 |
| Projectcalico | Calico | >= 2.7.0, <= 2.7.4 |
| Projectcalico | Calico | >= 2.8.0, <= 2.8.2 |
| Projectcalico | Calico | >= 3.9.0, <= 3.9.5 |
| Projectcalico | Calico | >= 3.10.0, <= 3.10.3 |
| Projectcalico | Calico | >= 3.11.0, <= 3.11.2 |
| Projectcalico | Calico | >= 3.12.0, <= 3.12.1 |
| Projectcalico | Calico | >= 3.13.0, <= 3.13.3 |
| Projectcalico | Calico | 3.14.0 |
References
- https://github.com/kubernetes/kubernetes/issues/91507Issue Tracking, Third Party Advisory
- https://www.projectcalico.org/security-bulletins/Vendor Advisory
- https://github.com/kubernetes/kubernetes/issues/91507Issue Tracking, Third Party Advisory
- https://www.projectcalico.org/security-bulletins/Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2020-13597?
How severe is CVE-2020-13597?
How do I fix CVE-2020-13597?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2020
- CVE-2020-13591An exploitable SQL injection vulnerability exists in the "ac…8.8
- CVE-2020-13592An exploitable SQL injection vulnerability exists in "global…8.8
- CVE-2020-13593The Bluetooth Low Energy Secure Manager Protocol (SMP) imple…8.8
- CVE-2020-13594The Bluetooth Low Energy (BLE) controller implementation in …6.5
- CVE-2020-13595The Bluetooth Low Energy (BLE) controller implementation in …6.5
- CVE-2020-13596An issue was discovered in Django 2.2 before 2.2.13 and 3.0 …6.1
- CVE-2020-13598FS: Buffer Overflow when enabling Long File Names in FAT_FS …7.8
- CVE-2020-13599Security problem with settings and littlefs. Zephyr versions…3.3
- CVE-2020-1360An elevation of privilege vulnerability exists when the Wind…7.8
- CVE-2020-13600Malformed SPI in response for eswifi can corrupt kernel memo…7.6
- CVE-2020-13601Possible read out of bounds in dns read. Zephyr versions >= …9.8
- CVE-2020-13602Remote Denial of Service in LwM2M do_write_op_tlv. Zephyr ve…5.5
Are you affected by CVE-2020-13597?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST