VDB
GO-2024-2569
GO-2024-2569
PUBLISHED
Unencrypted traffic between pods when using Wireguard and an external kvstore in github.com/cilium/cilium
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| wolfi | hubble | 0, 0, 0 |
| github.com | cilium/cilium | 1.14.0, 1.14.0 |
| chainguard | hubble | 0, 0, 0 |
| wolfi | hubble-ui | 0, 0, 0 |
| chainguard | cilium-1.15 | *, *, * |
| chainguard | hubble-fips | 0, 0, 0 |
| chainguard | cilium-fips-1.15 | *, *, * |
| chainguard | hubble-ui | 0, 0, 0 |
Timeline
- Jun 4, 2024 CVE Published
- Feb 4, 2026 CVE Updated
- May 18, 2026 Security Advisory
References
- https://docs.cilium.io/en/stable/installation/k8s-install-external-etcd/#when-do-i-need-to-use-a-kvstore url
- https://docs.cilium.io/en/stable/security/network/encryption-wireguard/#encryption-wg url
- https://github.com/cilium/cilium/security/advisories/GHSA-x989-52fc-4vr4 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-25631 advisory
- https://github.com/cilium/cilium/releases/tag/v1.14.7 fix