Cilium vulnerabilities
40 CVEs and advisories name Cilium as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-39347Cilium NetworkPolicy bypass via pod labels
- CVE-2023-34242Cilium vulnerable to information leakage via incorrect ReferenceGrant handling
- CVE-2023-30851Potential HTTP policy bypass when using header rules in Cilium
- CVE-2023-29002Debug mode leaks confidential data in Cilium
- CVE-2023-28114`cilium-cli` disables etcd authorization for clustermesh clusters
- CVE-2023-27595Cilium eBPF filters may be temporarily removed during agent restart
- CVE-2023-27594Cilium vulnerable to potential network policy bypass when routing IPv6 traffic
- CVE-2023-27593cilium-agent container can access the host via `hostPath` mount
- CVE-2022-29179Improper Privilege Management in Cilium
- CVE-2022-29178Incorrect Default Permissions in Cilium