CVE-2024-42486 Affecting cilium-1.16 package, versions <1.16.1-r0
Threat Intelligence
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-WOLFILATEST-CILIUM116-7693510
- published 17 Aug 2024
- disclosed 16 Aug 2024
Introduced: 16 Aug 2024
CVE-2024-42486 Open this link in a new tabHow to fix?
Upgrade Wolfi cilium-1.16 to version 1.16.1-r0 or higher.
NVD Description
Note: Versions mentioned in the description apply only to the upstream cilium-1.16 package and not the cilium-1.16 package as distributed by Wolfi.
See How to fix? for Wolfi relevant fixed versions and status.
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. In versions on the 1.15.x branch prior to 1.15.8 and the 1.16.x branch prior to 1.16.1, ReferenceGrant changes are not correctly propagated in Cilium's GatewayAPI controller, which could lead to Gateway resources being able to access secrets for longer than intended, or to Routes having the ability to forward traffic to backends in other namespaces for longer than intended. This issue has been patched in Cilium v1.15.8 and v1.16.1. As a workaround, any modification of a related Gateway/HTTPRoute/GRPCRoute/TCPRoute CRD (for example, adding any label to any of these resources) will trigger a reconciliation of ReferenceGrants on an affected cluster.