cilium vulnerabilities (Bitnami)
36 vulnerabilities.
-
ciliumBitnami Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match 5.4 Medium -
ciliumBitnami Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces 5.9 Medium -
ciliumBitnami CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation 6.9 Medium -
ciliumBitnami Cilium: Sensitive information disclosure and cluster disruption via local Envoy admin socket access 9.2 Critical -
ciliumBitnami Cillium exposes sensitive information included in the cilium-bugtool debug archive 7.9 High -
ciliumBitnami Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic 5.4 Medium -
ciliumBitnami Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled 6.1 Medium -
ciliumBitnami Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic 4.0 Medium -
ciliumBitnami Cilium packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters 4.0 Medium -
ciliumBitnami Node based network policies may incorrectly allow workload traffic 3.4 Low -
ciliumBitnami East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancers 3.2 Low -
ciliumBitnami Cilium vulnerable to information leakage via insecure default Hubble UI CORS header 6.5 Medium -
ciliumBitnami DoS in Cilium agent DNS proxy from crafted DNS responses 5.3 Medium -
ciliumBitnami Layer 7 policy enforcement may not occur in policies with wildcarded port ranges in Cilium 5.8 Medium -
ciliumBitnami CIDR deny policies may not take effect when a more narrow CIDR allow is present 4.0 Medium -
ciliumBitnami Cilium vulnerable to information leakage via incorrect ReferenceGrant update logic in Gateway API 5.4 Medium -
ciliumBitnami Cilium agent's race condition may lead to policy bypass for Host Firewall policy 6.8 Medium -
ciliumBitnami Cilium's Gateway API route matching order contradicts specification 4.0 Medium -
ciliumBitnami Cilium leaks sensitive information in cilium-bugtool 7.9 High -
ciliumBitnami Insecure IPsec transport encryption in Cilium 8.0 High -
ciliumBitnami Cilium has possible unencrypted traffic between nodes when using WireGuard and L7 policies 6.1 Medium -
ciliumBitnami Cilium has possible unencrypted traffic between nodes when using IPsec and L7 policies 6.1 Medium -
ciliumBitnami Cilium intermittent HTTP policy bypass 7.2 High -
ciliumBitnami Unencrypted traffic between pods when using Wireguard and an external kvstore 6.1 Medium -
ciliumBitnami Cilium has unencrypted ingress/health traffic when using Wireguard transparent encryption 6.1 Medium -
ciliumBitnami Denial of service via Kubernetes annotations in specific Cilium configurations 3.5 Low -
ciliumBitnami Bypass of namespace restrictions in CiliumNetworkPolicy 6.9 Medium -
ciliumBitnami Cilium NetworkPolicy bypass via pod labels 7.6 High -
ciliumBitnami Cilium vulnerable to information leakage via incorrect ReferenceGrant handling 3.4 Low -
ciliumBitnami Potential HTTP policy bypass when using header rules in Cilium 2.6 Low -
ciliumBitnami Debug mode leaks confidential data in Cilium 7.2 High -
ciliumBitnami Cilium eBPF filters may be temporarily removed during agent restart 6.5 Medium -
ciliumBitnami Cilium vulnerable to potential network policy bypass when routing IPv6 traffic 4.2 Medium -
ciliumBitnami cilium-agent container can access the host via `hostPath` mount 4.4 Medium -
ciliumBitnami Improper Privilege Management in Cilium 7.5 High -
ciliumBitnami Incorrect Default Permissions in Cilium 8.8 High