GO-2022-0393
and 12 other vulnerabilities
GO-2022-0393 : Network policy may be bypassed by some ICMP Echo Requests in github.com/cilium/cilium
GO-2022-0457 : Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium
GO-2022-0458 : Improper Privilege Management in Cilium in github.com/cilium/cilium
GO-2022-0959 : Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium
GO-2023-1643 : Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium
GO-2023-1730 : Debug mode leaks confidential data in Cilium in github.com/cilium/cilium
GO-2023-1785 : Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium
GO-2023-2078 : Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium
GO-2023-2079 : Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium
GO-2023-2080 : Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium
GO-2024-2656 : Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium
GO-2024-2666 : Insecure IPsec transparent encryption in github.com/cilium/cilium
GO-2024-3072 : Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium
Discover Packages
github.com/cilium/cilium
pkg
k8s
endpointsynchronizer
package
Version:
v1.7.11
Opens a new window with list of versions in this module.
Published: Oct 28, 2020
License: Apache-2.0
Opens a new window with license information.
Imports: 19
Opens a new window with list of imports.
Imported by: 0
Opens a new window with list of known importers.
Documentation
¶
EndpointSynchronizer currently is an empty type, which wraps around syncing
of CiliumEndpoint resources.
TODO - see whether folding the global variables below into this function
is cleaner.
RunK8sCiliumEndpointSync starts a controller that synchronizes the endpoint
to the corresponding k8s CiliumEndpoint CRD. It is expected that each CEP
has 1 controller that updates it, and a local copy is retained and only
updates are pushed up.
CiliumEndpoint objects have the same name as the pod they represent.
¶
Click to show internal directories.
Click to hide internal directories.
Affected by 
Documentation
¶
Source Files