Affected by GO-2024-2568
and 8 other vulnerabilities
GO-2024-2568 : Unencrypted ingress/health traffic when using Wireguard transparent encryption in github.com/cilium/cilium
GO-2024-2569 : Unencrypted traffic between pods when using Wireguard and an external kvstore in github.com/cilium/cilium
GO-2024-2653 : HTTP policy bypass in github.com/cilium/cilium
GO-2024-2656 : Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium
GO-2024-2657 : Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium
GO-2024-2666 : Insecure IPsec transparent encryption in github.com/cilium/cilium
GO-2024-2922 : Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium
GO-2024-3072 : Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium
GO-2024-3208 : Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium
Discover Packages
github.com/cilium/cilium
pkg
labels
cidr
package
Version:
v1.14.2
Opens a new window with list of versions in this module.
Published: Sep 11, 2023
License: Apache-2.0
Opens a new window with license information.
Imports: 5
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
Documentation
Documentation
¶
Package cidr provides helper methods for generating labels for CIDRs which
are partially derived from node state.
GetCIDRLabels turns a CIDR into a set of labels representing the cidr itself
and all broader CIDRS which include the specified CIDR in them. For example:
CIDR: 10.0.0.0/8 =>
"cidr:10.0.0.0/8", "cidr:10.0.0.0/7", "cidr:8.0.0.0/6",
"cidr:8.0.0.0/5", "cidr:0.0.0.0/4, "cidr:0.0.0.0/3",
"cidr:0.0.0.0/2", "cidr:0.0.0.0/1", "cidr:0.0.0.0/0"
The identity reserved:world is always added as it includes any CIDR.
IPStringToLabel parses a string and returns it as a CIDR label.
If ip is not a valid IP address or CIDR Prefix, returns an error.
Source Files
¶
Click to show internal directories.
Click to hide internal directories.