GO-2022-0393
and 12 other vulnerabilities
GO-2022-0393 : Network policy may be bypassed by some ICMP Echo Requests in github.com/cilium/cilium
GO-2022-0457 : Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium
GO-2022-0458 : Improper Privilege Management in Cilium in github.com/cilium/cilium
GO-2022-0959 : Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium
GO-2023-1643 : Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium
GO-2023-1730 : Debug mode leaks confidential data in Cilium in github.com/cilium/cilium
GO-2023-1785 : Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium
GO-2023-2078 : Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium
GO-2023-2079 : Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium
GO-2023-2080 : Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium
GO-2024-2656 : Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium
GO-2024-2666 : Insecure IPsec transparent encryption in github.com/cilium/cilium
GO-2024-3072 : Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium
Discover Packages
github.com/cilium/cilium
pkg
datapath
alignchecker
package
Version:
v1.8.7
Opens a new window with list of versions in this module.
Published: Feb 18, 2021
License: Apache-2.0
Opens a new window with license information.
Imports: 16
Opens a new window with list of imports.
Imported by: 8
Opens a new window with list of known importers.
Documentation
¶
Package alignchecker is a thin wrapper around pkg/alignchecker to validate
datapath object alignment.
CheckStructAlignments checks whether size and offsets of the C and Go
structs for the datapath match.
C struct size info is extracted from the given ELF object file debug section
encoded in DWARF.
To find a matching C struct field, a Go field has to be tagged with
`align:"field_name_in_c_struct". In the case of unnamed union field, such
union fields can be referred with special tags - `align:"$union0"`,
`align:"$union1"`, etc.
¶
Click to show internal directories.
Click to hide internal directories.
Affected by 
Documentation
¶
Source Files