CVE-2024-33522

CVE-2024-33522 affects Calico CNI installations where vulnerable releases (Calico <= v3.27.2, Enterprise <= v3.19.0-1, v3.18.1, v3.17.3 and below, Cloud

CVE-2024-33522 Privilege escalation in Calico CNI install binary

In vulnerable versions of Calico v3.27.2 and below, Calico Enterprise v3.19.0-1, v3.18.1, v3.17.3 and below, and Calico Cloud v19.2.0 and below, an attacker who has local access to the Kubernetes node, can escalate their privileges by exploiting a vulnerability in the Calico CNI install binary. T...

Calico 安全漏洞

Tigera Calico is an open source cybersecurity solution for container, virtual machine, and host workloads from Tigera USA. A security vulnerability exists in Calico, Calico Enterprise, and Calico Cloud. An attacker could exploit the vulnerability to execute arbitrary binaries with elevated...

GHSA-8R3F-844C-MC37 vulnerabilities

Vulnerabilities for packages: kubeflow-fips, volume-modifier-for-k8s-fips, aws-flb-kinesis, kpt, grafana-operator, cert-exporter-fips, helm-operator, skaffold, crossplane-provider-azure-sql, newrelic-infrastructure-agent, vault-k8s, fuse-overlayfs-snapshotter, trillian-fips, configmap-reload-fips...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: kubeflow-fips, volume-modifier-for-k8s-fips, aws-flb-kinesis, kpt, grafana-operator, cert-exporter-fips, helm-operator, skaffold, crossplane-provider-azure-sql, newrelic-infrastructure-agent, vault-k8s, fuse-overlayfs-snapshotter, trillian-fips, configmap-reload-fips...

olcne security update

conmon 2.1.3-7 - Resolve CVE-2023-39325 2.1.3-6 - Add ol8baseoslatest, and ol9baseoslatest, to Jenkinsfile 2.1.3-5 - Add systemd-devel as build requirement 2.1.3-4 - Add support ARM build 2.1.3.3 - Add OL9 support 2.1.3.2 - Update inline with Linux team building conmon for all but OL7. cri-o...

Important Photon OS Security Update - PHSA-2023-4.0-0518

Updates of 'calico', 'mysql' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-5.0-0152

Updates of 'calico' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2023-3.0-0690

Updates of 'calico' packages of Photon OS have been released...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: ip-masq-agent, spark-operator, aws-efs-csi-driver-fips, kubernetes-dns-node-cache, aws-efs-csi-driver, nodetaint, prometheus-adapter, aws-ebs-csi-driver...

GHSA-HQ6Q-C2X6-HMCH vulnerabilities

Vulnerabilities for packages: prometheus-adapter, ip-masq-agent, nodetaint, aws-efs-csi-driver, spark-operator, kubernetes-dns-node-cache...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, ip-masq-agent, nodetaint, aws-efs-csi-driver, spark-operator, kubernetes-dns-node-cache...

CVE-2023-5528 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, spark-operator, aws-efs-csi-driver-fips, kubernetes-dns-node-cache, aws-efs-csi-driver, nodetaint, prometheus-adapter, aws-ebs-csi-driver...

Denial Of Service (DoS)

github.com/projectcalico/calico is vulnerable to Denial Of Service DoS. The vulnerability exists because the TLS Handshake call is executed within the main server handle loop without any timeout mechanism. This means that an incomplete or unclean TLS handshake can potentially block the main loop...

Calico Typha denial of service vulnerability

In certain conditions for Calico Typha v3.26.2, v3.25.1 and below, and Calico Enterprise Typha v3.17.1, v3.16.3, v3.15.3 and below, a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake call is performed inside the main server...

GHSA-5R5H-Q934-CCCP Calico Typha denial of service vulnerability

In certain conditions for Calico Typha v3.26.2, v3.25.1 and below, and Calico Enterprise Typha v3.17.1, v3.16.3, v3.15.3 and below, a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake call is performed inside the main server...

CVE-2023-41378

In certain conditions for Calico Typha v3.26.2, v3.25.1 and below, and Calico Enterprise Typha v3.17.1, v3.16.3, v3.15.3 and below, a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake call is performed inside the main server...

Design/Logic Flaw

In certain conditions for Calico Typha v3.26.2, v3.25.1 and below, and Calico Enterprise Typha v3.17.1, v3.16.3, v3.15.3 and below, a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake call is performed inside the main server...

CVE-2023-41378 Calico Typha hangs during unclean TLS handshake

In certain conditions for Calico Typha v3.26.2, v3.25.1 and below, and Calico Enterprise Typha v3.17.1, v3.16.3, v3.15.3 and below, a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake call is performed inside the main server...

CVE-2023-41378 Calico Typha hangs during unclean TLS handshake

In certain conditions for Calico Typha v3.26.2, v3.25.1 and below, and Calico Enterprise Typha v3.17.1, v3.16.3, v3.15.3 and below, a client TLS handshake can block the Calico Typha server indefinitely, resulting in denial of service. The TLS Handshake call is performed inside the main server...