Cilium CVE-2024-47825: CIDR Deny Policy Bypass Vulnerability and Fix

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability Description: - Vulnerability Name: CIDR deny policies may not take effect when a more narrow CIDR allow is present - Publisher: ferozsalam - CVE ID: CVE-2024-47825 - Severity: Moderate (4.0/10) - Affected Versions: - >= 1.15.0, = 1.14.0, < 1.14.16 - Fixed Versions: - 1.15.10 - 1.14.16 2. Impact: - When a more specific CIDR allow policy exists, a broader CIDR deny policy may not take effect. 3. Example: - Sample code demonstrates how to configure CIDR policies to illustrate the issue. 4. Remediation: - Patch: Applies to the following versions: - Cilium v1.14 between v1.14.0 and v1.14.15 - Cilium v1.15 between v1.15.0 and v1.15.9 - Fixed Versions: - Cilium v1.14.16 - Cilium v1.15.10 5. Workarounds: - For policies using , the issue can be bypassed by removing this configuration option and explicitly defining required allow rules. - For policies explicitly specifying , no workaround is available. 6. Acknowledgments: - Special thanks to @squeed, @christarazi, and @jrajahalme for their work in handling and resolving this issue. 7. Additional Information: - For any questions or comments, please contact the Cilium community via Slack. - If you discover a vulnerability affecting Cilium, it is strongly recommended to report it to the Cilium security team, as reports will be prioritized. This information provides a detailed description of the vulnerability, its scope of impact, remediation steps, workarounds, and how to contact the Cilium community for further information or to report vulnerabilities.

Goal Reached Thanks to every supporter — we hit 100%!

Cilium CVE-2024-47825: CIDR Deny Policy Bypass Vulnerability and Fix

More from this source