CVE-2024-52529

描述

Cilium's Layer 7 policy enforcement may not occur in policies with wildcarded port ranges in github.com/cilium/cilium

受影響套件(5)

• Bitnami/cilium>= 1.16.0, < 1.16.4
• Bitnami/cilium-operator>= 1.16.0, < 1.16.4
• Bitnami/hubble-relay>= 1.16.0, < 1.16.4
• Go/github.com/cilium/cilium>= 1.16.0, < 1.16.4
• Go/github.com/cilium/cilium>= 1.16.0, < 1.16.4

CVSS 分數

參考連結(4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2024-52529
• PATCHhttps://github.com/cilium/cilium
• WEBhttps://github.com/cilium/cilium/pull/35150
• WEBhttps://github.com/cilium/cilium/security/advisories/GHSA-xg58-75qf-9r67