Go/github.com/cilium/cilium CVE-2022-29178: high 8.8, EPSS 0.29%
Access to Unix domain socket can lead to privileges escalation in Cilium
Action: Upgrade github.com/cilium/cilium to 1.9.16 or later.
go get github.com/cilium/cilium@v1.11.5go get github.com/cilium/cilium@v1.10.11go get github.com/cilium/cilium@v1.9.16Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.11.0 | 1.11.5 | - |
| 1.10.0 | 1.10.11 | - |
| 0 | 1.9.16 | - |
Fixed versions
| 1.11.5 | 1.10.11 | 1.9.16 |
Sources
- osv: GHSA-6p8v-8cq8-v2r3
- https://github.com/cilium/cilium/security/advisories/GHSA-6p8v-8cq8-v2r3
- https://nvd.nist.gov/vuln/detail/CVE-2022-29178
- https://github.com/cilium/cilium/releases/tag/v1.10.11
- https://github.com/cilium/cilium/releases/tag/v1.11.5
- https://github.com/cilium/cilium/releases/tag/v1.9.16
CVE-2022-29178 · published · modified · JSON