CVE-2024-25631mediumCWE-311

CVE-2024-25631: fallo de gravedad media en cilium

Unencrypted traffic between pods when using Wireguard and an external kvstore

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear cilium+ Monitorear github.com/cilium/cilium

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.1epss 0.2%
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For Cilium users who have enabled an external kvstore and Wireguard transparent encryption, traffic between pods in the affected cluster is not encrypted. This issue affects Cilium v1.14 before v1.14.7 and has been patched in Cilium v1.14.7. There is no workaround to this issue.
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Productos afectados
cilium · cilium
CVEs relacionadas — cilium

En el mismo producto, de las más peligrosas a las menos.

CVE-2023-27595MEDIUMCilium eBPF filters may be temporarily removed during agent restartEPSS 0.7%CVE-2023-30851LOWPotential HTTP policy bypass when using header rules in CiliumEPSS 0.7%CVE-2024-28248HIGHCilium intermittent HTTP policy bypassEPSS 0.6%CVE-2024-42486MEDIUMCilium vulnerable to information leakage via incorrect ReferenceGrant update logic in Gateway APIEPSS 0.6%CVE-2023-39347HIGHCilium NetworkPolicy bypass via pod labelsEPSS 0.6%CVE-2023-27594MEDIUMCilium vulnerable to potential network policy bypass when routing IPv6 traffic EPSS 0.6%