Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium
Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-47825US | high8.7OT elevated | — | ||
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.14.0 and prior to versions 1.14.16 and 1.15.10, a policy rule denyi… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/cilium/cilium/commit/02d28d9ac9afcaddd301fae6fb4d6cda8c2d0c45FIX
- https://github.com/cilium/cilium/commit/9c01afb5646af3f0c696421a410dc66c513b6524FIX
- https://github.com/cilium/cilium/security/advisories/GHSA-3wwx-63fv-pfq6ADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2024-47825ADVISORY
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan