Go/github.com/cilium/cilium CVE-2024-42486: medium 5.4, EPSS 0.57%
Cilium leaks information via incorrect ReferenceGrant update logic in Gateway API
Action: Upgrade github.com/cilium/cilium to 1.15.8 or later.
go get github.com/cilium/cilium@v1.16.1go get github.com/cilium/cilium@v1.15.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.16.0 | 1.16.1 | - |
| 1.15.0 | 1.15.8 | - |
Fixed versions
| 1.16.1 | 1.15.8 |
Sources
- osv: GHSA-vwf8-q6fw-4wcm
- https://github.com/cilium/cilium/security/advisories/GHSA-vwf8-q6fw-4wcm
- https://nvd.nist.gov/vuln/detail/CVE-2024-42486
- https://github.com/cilium/cilium/pull/34032
- https://github.com/cilium/cilium/commit/414a96b53d51ef6e6645c44426e26bc8e7c7c059
- https://github.com/cilium/cilium/commit/92c110e58a7be6586819dd51fb0f6ee1ec4be8f8
- https://github.com/cilium/cilium/commit/ed3dfa0aab8b80f7e841a6d49d2a990ac2dca053
- https://github.com/cilium/cilium
CVE-2024-42486 · published · modified · JSON