Affected by GO-2023-2078
and 11 other vulnerabilities
GO-2023-2078 : Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium
GO-2023-2079 : Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium
GO-2023-2080 : Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium
GO-2024-2568 : Unencrypted ingress/health traffic when using Wireguard transparent encryption in github.com/cilium/cilium
GO-2024-2569 : Unencrypted traffic between pods when using Wireguard and an external kvstore in github.com/cilium/cilium
GO-2024-2653 : HTTP policy bypass in github.com/cilium/cilium
GO-2024-2656 : Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium
GO-2024-2657 : Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium
GO-2024-2666 : Insecure IPsec transparent encryption in github.com/cilium/cilium
GO-2024-2922 : Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium
GO-2024-3072 : Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium
GO-2024-3208 : Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium
Discover Packages
github.com/cilium/cilium
pkg
maps
ipmasq
package
Version:
v1.14.0
Opens a new window with list of versions in this module.
Published: Jul 27, 2023
License: Apache-2.0
Opens a new window with license information.
Imports: 8
Opens a new window with list of imports.
Imported by: 5
Opens a new window with list of known importers.
Documentation
Documentation
¶
View Source
const (
MapNameIPv4 = "cilium_ipmasq_v4"
MaxEntriesIPv4 = 16384
MapNameIPv6 = "cilium_ipmasq_v6"
MaxEntriesIPv6 = 16384
)
type IPMasqBPFMap struct{}
Dump dumps the contents of the ip-masq-agent maps for IPv4 and/or IPv6, as
required based on configuration options.
DumpForProtocols dumps the contents of the ip-masq-agent maps for IPv4
and/or IPv6, as requested by the caller.
Given that the package does not expose the maps directly, it's necessary to
specify which protocol we need when ipMasq4Map/ipMasq6Map, or config
options, have not been set, as is the case when calling from the CLI, for
example.
type Value struct {
Pad uint8
}
Source Files
¶
Click to show internal directories.
Click to hide internal directories.