Affected by GO-2022-0617 and 8 other vulnerabilities

GO-2022-0617: WITHDRAWN: Potential proxy IP restriction bypass in Kubernetes in k8s.io/kubernetes

GO-2022-0910: Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

GO-2022-0983: kubectl ANSI escape characters not filtered in k8s.io/kubernetes

GO-2023-1864: Kubelet vulnerable to bypass of seccomp profile enforcement in k8s.io/kubernetes

GO-2023-1891: kube-apiserver vulnerable to policy bypass in k8s.io/kubernetes

GO-2023-1892: Kubernetes mountable secrets policy bypass in k8s.io/kubernetes

GO-2023-2341: Kubernetes Improper Input Validation vulnerability in k8s.io/kubernetes

GO-2024-2994: Kubernetes sets incorrect permissions on Windows containers logs in k8s.io/kubernetes

GO-2024-3277: Kubernetes Nil pointer dereference in KCM after v1 HPA patch request in k8s.io/kubernetes

conntrack

package

v1.21.5-rc.0 Latest Latest Go to latest Published: Aug 11, 2021 License: Apache-2.0 Imports: 7 Imported by: 0

Details

View Source

const NoConnectionToDelete = "0 flow entries have been deleted"

NoConnectionToDelete is the error string returned by conntrack when no matching connections are found

This section is empty.

func ClearEntriesForIP(execer exec.Interface, ip string, protocol v1.Protocol) error

ClearEntriesForIP uses the conntrack tool to delete the conntrack entries for the UDP connections specified by the given service IP

func ClearEntriesForNAT(execer exec.Interface, origin, dest string, protocol v1.Protocol) error

ClearEntriesForNAT uses the conntrack tool to delete the conntrack entries for connections specified by the {origin, dest} IP pair.

func ClearEntriesForPort(execer exec.Interface, port int, isIPv6 bool, protocol v1.Protocol) error

ClearEntriesForPort uses the conntrack tool to delete the conntrack entries for connections specified by the port. When a packet arrives, it will not go through NAT table again, because it is not "the first" packet. The solution is clearing the conntrack. Known issues: https://github.com/docker/docker/issues/8795 https://github.com/kubernetes/kubernetes/issues/31983

func ClearEntriesForPortNAT(execer exec.Interface, dest string, port int, protocol v1.Protocol) error

ClearEntriesForPortNAT uses the conntrack tool to delete the conntrack entries for connections specified by the {dest IP, port} pair. Known issue: https://github.com/kubernetes/kubernetes/issues/59368

func Exec(execer exec.Interface, parameters ...string) error

Exec executes the conntrack tool using the given parameters

func Exists(execer exec.Interface) bool

Exists returns true if conntrack binary is installed.

func IsClearConntrackNeeded(proto v1.Protocol) bool

IsClearConntrackNeeded returns true if protocol requires conntrack cleanup for the stale connections

This section is empty.