CVE-2023-27594

CVSS V2 None CVSS V3 None
Description
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.11.15, 1.12.8, and 1.13.1, under specific conditions, Cilium may misattribute the source IP address of traffic to a cluster, identifying external traffic as coming from the host on which Cilium is running. As a consequence, network policies for that cluster might be bypassed, depending on the specific network policies enabled. This issue only manifests when Cilium is routing IPv6 traffic and NodePorts are used to route traffic to pods. IPv6 and endpoint routes are both disabled by default. The problem has been fixed and is available on versions 1.11.15, 1.12.8, and 1.13.1. As a workaround, disable IPv6 routing.
Overview
  • CVE ID
  • CVE-2023-27594
  • Assigner
  • security-advisories@github.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-03-17T20:15:13
  • Last Modified Date
  • 2023-03-24T16:33:45
Weakness Enumerations
CWE URL
CWE-863 http://cwe.mitre.org/data/definitions/863.html
CWE-285 http://cwe.mitre.org/data/definitions/285.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:cilium:cilium:*:*:*:*:*:*:*:* 1 OR 1.11.15
cpe:2.3:a:cilium:cilium:*:*:*:*:*:*:*:* 1 OR 1.12.0 1.12.8
cpe:2.3:a:cilium:cilium:*:*:*:*:*:*:*:* 1 OR 1.13.0 1.13.1
References
Reference URL Reference Tags
https://github.com/cilium/cilium/releases/tag/v1.11.15 Third Party Advisory
https://github.com/cilium/cilium/releases/tag/v1.12.8 Third Party Advisory
https://github.com/cilium/cilium/releases/tag/v1.13.1 Third Party Advisory
https://github.com/cilium/cilium/security/advisories/GHSA-8fg8-jh2h-f2hc Third Party Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2023-27594
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-27594
History
Created Old Value New Value Data Type Notes
2023-04-17 02:55:41 Added to TrackCVE
2023-04-17 02:55:44 Weakness Enumeration new