CVE-2023-27594 Cilium vulnerable to potential network policy bypass when routing IPv6 traffic

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.11.15, 1.12.8, and 1.13.1, under specific conditions, Cilium may misattribute the source IP address of traffic to a cluster, identifying external traffic as coming from the host on which...

CVE-2023-27593 cilium-agent container can access the host via `hostPath` mount

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.11.15, 1.12.8, and 1.13.1, an attacker with access to a Cilium agent pod can write to /opt/cni/bin due to a hostPath mount of that directory in the agent pod. By replacing the CNI binary...

Palo Alto Networks PAN-OS 权限许可和访问控制问题漏洞

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A privilege permission and access control issue vulnerability exists in the Palo Alto Networks PAN-OS dataplan that stems from a mishandling of an anomalous condition vulnerability ...

Palo Alto Networks PAN-OS 7.0.x < 7.0.6 DHCP Packet Handling Dataplane DoS

The version of Palo Alto Networks PAN-OS running on the remote host is 7.0.x 7.0.6. It is, therefore, affected by a flaw in the firewall functionality that is triggered when the firewall is configured as a DHCP relay and it receives DHCP requests from a third-party client or server that exceed th...