BIT-cilium-2025-30162

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/cilium/BIT-cilium-2025-30162.json

JSON Data

https://api.osv.dev/v1/vulns/BIT-cilium-2025-30162

Aliases

Published

2025-03-26T07:08:03.178Z

Modified

2025-04-03T14:40:37.652Z

Summary

[none]

Details

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For Cilium users who use Gateway API for Ingress for some services and use LB-IPAM or BGP for LB Service implementation and use network policies to block egress traffic from workloads in a namespace to workloads in other namespaces, egress traffic from workloads covered by such network policies to LoadBalancers configured by Gateway resources will incorrectly be allowed. LoadBalancer resources not deployed via a Gateway API configuration are not affected by this issue. This issue affects: Cilium v1.15 between v1.15.0 and v1.15.14 inclusive, v1.16 between v1.16.0 and v1.16.7 inclusive, and v1.17 between v1.17.0 and v1.17.1 inclusive. This issue is fixed in Cilium v1.15.15, v1.16.8, and v1.17.2. A Clusterwide Cilium Network Policy can be used to work around this issue for users who are unable to upgrade.

Database specific

{
    "cpes": [
        "cpe:2.3:a:cilium:cilium:*:*:*:*:*:go:*:*"
    ],
    "severity": "Low"
}

References

Affected packages

Bitnami / cilium

Package

Name: cilium
Purl: pkg:bitnami/cilium

Severity

3.2 (Low) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

1.15.0

Fixed

1.17.2