Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Cilium agent's race condition may lead to policy bypass for Host Firewall policy
Vulnerability Description
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.14.14 and 1.15.8, a race condition in the Cilium agent can cause the agent to ignore labels that should be applied to a node. This could in turn cause CiliumClusterwideNetworkPolicies intended for nodes with the ignored label to not apply, leading to policy bypass. This issue has been patched in Cilium v1.14.14 and v1.15.8 As the underlying issue depends on a race condition, users unable to upgrade can restart the Cilium agent on affected nodes until the affected policies are confirmed to be working as expected.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Vulnerability Type
使用共享资源的并发执行不恰当同步问题(竞争条件)
Vulnerability Title
Cilium 安全漏洞
Vulnerability Description
Cilium是Cilium开源的一个开源软件。用于提供和透明地保护应用程序工作负载（如应用程序容器或进程）之间的网络连接和负载平衡。 Cilium 1.14.14和1.15.8之前版本存在安全漏洞，该漏洞源于代理中的竞争条件可能导致代理忽略应应用于节点的标签，导致CiliumClusterwideNetworkPolicies不适用于具有忽略标签的节点，从而导致策略绕过。
CVSS Information
N/A
Vulnerability Type
N/A