PT-2024-22366 · Cilium · Cilium

Name of the Vulnerable Software and Affected Versions: Cilium versions 1.14.0 through 1.14.7 Cilium versions 1.15.0 through 1.15.1 Cilium version 1.14.4 with encryption.wireguard.encapsulate set to false in tunneling mode Description: In Cilium clusters with WireGuard enabled and traffic matching...

PT-2024-22363 · Cilium · Cilium

Name of the Vulnerable Software and Affected Versions: Cilium versions 1.13.9 through 1.13.12 Cilium versions 1.14.0 through 1.14.7 Cilium versions 1.15.0 through 1.15.1 Description: Cilium's HTTP policies are not consistently applied to all traffic in the scope of the policies, leading to HTTP...

Cilium Security Vulnerabilities

Cilium is an open source software. It is used to provide and transparently protect network connectivity and load balancing between application workloads such as application containers or processes. Cilium suffers from a security vulnerability that stems from the possibility of unencrypted traffic...

Cilium Security Vulnerabilities

Cilium is an open source software. It is used to provide and transparently protect network connectivity and load balancing between application workloads such as application containers or processes. Cilium has a security vulnerability that stems from the possibility of unencrypted traffic between...

Cilium Security Vulnerabilities

Cilium is an open source software. It is used to provide and transparently protect network connectivity and load balancing between application workloads such as application containers or processes. Cilium suffers from a security vulnerability that stems from the fact that HTTP policies are not...

CVE-2024-28180 vulnerabilities

Vulnerabilities for packages: ko, minio, rekor, kargo, k3s, tkn, terragrunt, vexctl, gitsign, kube-rbac-proxy, sigstore-scaffolding, flux-kustomize-controller, skaffold, wolfictl, bank-vaults, dex, gomplate, weaviate, rabbitmq-messaging-topology-operator, timestamp-authority, apko, tekton-chains,...

GHSA-C5Q2-7R4C-MV6G vulnerabilities

Vulnerabilities for packages: temporal-ui-server, cloudflared, bank-vaults-fips, spire-server, neuvector, fulcio, rabbitmq-messaging-topology-operator, wolfictl, vexctl, cosign-fips, kargo, melange, sigstore-scaffolding-fips, zot, cilium, sops, skopeo, rekor, flux-kustomize-controller,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-eks, cert-exporter-fips, boring-registry, nfs-subdir-external-provisioner-fips, helm-operator, docker-compose, kustomize, vexctl, sigstore-scaffolding-fips, secrets-store-csi-driver-provider-gcp, nri-prometheus, zot, cilium,...

GHSA-JW44-4F3J-Q396 vulnerabilities

Vulnerabilities for packages: cilium-cli, k9s...

GHSA-JW44-4F3J-Q396 vulnerabilities

Vulnerabilities for packages: k9s, cilium-cli...

CVE-2019-25210 vulnerabilities

Vulnerabilities for packages: k9s, cilium-cli...

CVE-2019-25210 vulnerabilities

Vulnerabilities for packages: cilium-cli, k9s...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: chartmuseum, k8sgpt, cilium-cli, k9s, kubescape, zot, kubevela, trivy, helm-operator, up, eksctl, flux-helm-controller, flux-source-controller, zarf, kots, helm-push...

Missing Encryption

github.com/cilium/cilium is vulnerable to Missing Encryption. The vulnerability is due to a lack of encryption to/from the Ingress and health endpoints when CRDs are used to store the Cilium state and Wireguard transparent encryption is enabled, which allows an attacker to eavesdrop on the...

Missing Encryption

github.com/cilium/cilium is vulnerable to Missing Encryption between pods. The vulnerability is caused when external key-value store kvstore and Wireguard transparent encryption are enabled. If an attacker has access to the underlying cluster they can intercept sensitive traffic between pods,...

Unencrypted traffic between pods when using Wireguard and an external kvstore

Impact For Cilium users who have enabled an external kvstore and Wireguard transparent encryption, traffic between pods in the affected cluster is not encrypted. Patches This issue affects Cilium v1.14 before v1.14.7. This issue has been patched in Cilium v1.14.7. Workarounds There is no workarou...

GHSA-X989-52FC-4VR4 Unencrypted traffic between pods when using Wireguard and an external kvstore

Impact For Cilium users who have enabled an external kvstore and Wireguard transparent encryption, traffic between pods in the affected cluster is not encrypted. Patches This issue affects Cilium v1.14 before v1.14.7. This issue has been patched in Cilium v1.14.7. Workarounds There is no workarou...

GHSA-7496-FGV9-XW82 Unencrypted ingress/health traffic when using Wireguard transparent encryption

Impact For Cilium users who are using CRDs to store Cilium state the default configuration and Wireguard transparent encryption, responses from pods to the Ingress and health endpoints are not encrypted. Traffic from the Ingress and health endpoints to pods is not affected by this issue. The heal...

Unencrypted ingress/health traffic when using Wireguard transparent encryption

Impact For Cilium users who are using CRDs to store Cilium state the default configuration and Wireguard transparent encryption, responses from pods to the Ingress and health endpoints are not encrypted. Traffic from the Ingress and health endpoints to pods is not affected by this issue. The heal...

CVE-2024-25631

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For Cilium users who have enabled an external kvstore and Wireguard transparent encryption, traffic between pods in the affected cluster is not encrypted. This issue affects Cilium v1.14 before v1.14.7 and...