VDB
GHSA-pfhr-pccp-hwmh
GHSA-pfhr-pccp-hwmh
PUBLISHED
CVSS 4.300000190734863 MEDIUM
Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels
Risk Scores
CVSS 3.1
4.300000190734863
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chainguard | cilium-1.15 | * |
| chainguard | cilium-fips-1.14 | 0 |
| github.com | cilium/cilium | 0, 1.12.0, 1.12.0 |
| wolfi | cilium-1.15 | * |
| Go | github.com/cilium/cilium | 1.12.0, 0, 1.11.0 |
| github.com | cilium/cilium | 1.12.0, 0, 1.11.0 |
| wolfi | cilium-1.14 | 0 |
| chainguard | cilium-fips-1.15 | * |
| chainguard | cilium-1.14 | 0 |
Timeline
- Aug 30, 2022 CVE Published
References
- https://github.com/cilium/cilium/security/advisories/GHSA-pfhr-pccp-hwmh url
- https://github.com/cilium/cilium product
- GitHub Advisory GHSA-pfhr-pccp-hwmh vendor-advisory
- https://github.com/cilium/cilium/releases/tag/v1.10.14 fix
- https://github.com/cilium/cilium/releases/tag/v1.11.8 fix
- https://github.com/cilium/cilium/releases/tag/v1.12.1 fix