VDB

CVE-2024-42488

CVE-2024-42488 PUBLISHED CVSS 6.800000190734863 MEDIUM

Cilium agent's race condition may lead to policy bypass for Host Firewall policy

EPSS 0.50% · 40.6th percentile

Risk Scores

CVSS 3.1
6.800000190734863
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
EPSS Score
0.50%
40.6th percentile

Affected Products

VendorProductVersions
Bitnamicilium1.15.4, 1.15.4, 1.15.4
Bitnamicilium-operator1.15.4
Bitnamicilium-operator1.15.4, 1.15.4, 1.15.4
Bitnamihubble-relay0, 0, 0
github.comcilium/cilium
Bitnamicilium1.15.4

Timeline

  • Jan 20, 1970 Fix PR Merged
  • Jan 21, 1970 Security Advisory
  • Aug 15, 2024 CVE Published
  • Aug 16, 2024 EPSS Score
  • Aug 16, 2024 PoC Published
  • Sep 6, 2024 EPSS Score
  • Sep 27, 2024 EPSS Score
  • Oct 4, 2024 Coalition ESS Score
  • Oct 17, 2024 EPSS Score
  • Nov 7, 2024 EPSS Score
  • Nov 28, 2024 EPSS Score
  • Dec 20, 2024 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›