Auth bypass in Cilium
CVE-2023-27594
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.11.15, 1.12.8, and 1.13.1, under specific conditions, Cilium may misattribute the source IP address of traffic to a cluster, identifying external traffic as coming from the host on which Cilium is running. As a consequence, network policies for that cluster might be bypassed, depending on the specific network policies enabled. This issue only manifests when Cilium is routing IPv6 traffic and NodePorts are used to route traffic to pods. IPv6 and endpoint routes are both disabled by default. The problem has been fixed and is available on versions 1.11.15, 1.12.8, and 1.13.1. As a workaround, disable IPv6 routing.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 4.2 (Medium). Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N.
EPSS exploit prediction
EPSS: 0.006 (44.0th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 44th percentile — 44.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.006 · newest: 0.006 · change: 0.000
Affected products
- Cilium — versions < 1.11.15, >= 1.12.0, < 1.12.8, >= 1.13.0, < 1.13.1
Weakness classification (CWE)
References
- github.com/cilium/cilium/security/advisories/GHSA-8fg8-jh2h-f2hc (Third Party Advisory)
- github.com/cilium/cilium/releases/tag/v1.11.15 (Third Party Advisory)
- github.com/cilium/cilium/releases/tag/v1.12.8 (Third Party Advisory)
- github.com/cilium/cilium/releases/tag/v1.13.1 (Third Party Advisory)
Frequently asked questions
- What is CVE-2023-27594?
- CVE-2023-27594 is a medium-severity vulnerability in Cilium, classified under Improper Authorization. CVSS score: 4.2/10. Published 2023-03-17.
- How severe is CVE-2023-27594?
- Medium severity. CVSS v3 base score is 4.2 out of 10.