代码拉取完成，页面将自动刷新
更新失败，请稍后重试！
/
详情
CVE-2024-47825
评论 (2)
误判申诉
此处可能存在不合适展示的内容，页面不予展示。您可通过相关编辑功能自查并修改。
如您确认内容无涉及 不当用语 / 纯广告导流 / 暴力 / 低俗色情 / 侵权 / 盗版 / 虚假 / 无价值内容或违法国家有关法律法规的内容，可点击提交进行申诉，我们将尽快为您处理。
取消
提交
openeuler-ci-bot
添加了
标签
sig/sig-high-perform
原值
一、漏洞信息
漏洞编号：[CVE-2024-47825](https://nvd.nist.gov/vuln/detail/CVE-2024-47825)
漏洞归属组件：[cilium](https://gitee.com/src-openeuler/cilium)
漏洞归属的版本：1.11.15,1.11.16,1.14.2,1.14.9,1.7.0
CVSS V3.0分值：
BaseScore：4.0 Medium
Vector：CVSS：3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
漏洞简述：
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.14.0 and prior to versions 1.14.16 and 1.15.10, a policy rule denying a prefix that is broader than `/32` may be ignored if there is a policy rule referencing a more narrow prefix (`CIDRSet` or `toFQDN`) and this narrower policy rule specifies either `enableDefaultDeny: false` or `- toEntities: all`. Note that a rule specifying `toEntities: world` or `toEntities: 0.0.0.0/0` is insufficient, it must be to entity `all`.This issue has been patched in Cilium v1.14.16 and v1.15.10. As this issue only affects policies using `enableDefaultDeny: false` or that set `toEntities` to `all`, some workarounds are available. For users with policies using `enableDefaultDeny: false`, remove this configuration option and explicitly define any allow rules required. For users with egress policies that explicitly specify `toEntities: all`, use `toEntities: world`.
漏洞公开时间：2024-10-22 03:15:03
漏洞创建时间：2024-10-22 03:29:57
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2024-47825
<details>
<summary>更多参考(点击展开)</summary>
| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| security-advisories.github.com | https://github.com/cilium/cilium/security/advisories/GHSA-3wwx-63fv-pfq6 | |
| github_advisory | https://github.com/cilium/cilium/security/advisories/GHSA-3wwx-63fv-pfq6 | https://github.com/advisories/GHSA-3wwx-63fv-pfq6 |
| github_advisory | https://github.com/cilium/cilium/commit/02d28d9ac9afcaddd301fae6fb4d6cda8c2d0c45 | https://github.com/advisories/GHSA-3wwx-63fv-pfq6 |
| github_advisory | https://github.com/cilium/cilium/commit/9c01afb5646af3f0c696421a410dc66c513b6524 | https://github.com/advisories/GHSA-3wwx-63fv-pfq6 |
</details>
漏洞分析指导链接：
https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
漏洞数据来源:
openBrain开源漏洞感知系统
漏洞补丁信息：
<details>
<summary>详情(点击展开)</summary>
| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |
| ------- | -------- | ------- | -------- | --------- |
| | | https://github.com/cilium/cilium/commit/02d28d9ac9afcaddd301fae6fb4d6cda8c2d0c45 | | github_advisory |
| | | https://github.com/cilium/cilium/commit/9c01afb5646af3f0c696421a410dc66c513b6524 | | github_advisory |
</details>
二、漏洞分析结构反馈
影响性分析说明：
openEuler评分：
受影响版本排查(受影响/不受影响)：
1.master(1.14.9):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP1:
4.openEuler-22.03-LTS-SP3:
5.openEuler-22.03-LTS-SP4:
6.openEuler-24.03-LTS:
7.openEuler-24.03-LTS-Next:
修复是否涉及abi变化(是/否)：
1.master(1.14.9):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP1:
4.openEuler-22.03-LTS-SP3:
5.openEuler-22.03-LTS-SP4:
6.openEuler-24.03-LTS:
7.openEuler-24.03-LTS-Next:
新值
一、漏洞信息
漏洞编号：[CVE-2024-47825](https://nvd.nist.gov/vuln/detail/CVE-2024-47825)
漏洞归属组件：[cilium](https://gitee.com/src-openeuler/cilium)
漏洞归属的版本：1.11.15,1.11.16,1.14.2,1.14.9,1.7.0
CVSS V3.0分值：
BaseScore：4.0 Medium
Vector：CVSS：3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
漏洞简述：
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.14.0 and prior to versions 1.14.16 and 1.15.10, a policy rule denying a prefix that is broader than `/32` may be ignored if there is a policy rule referencing a more narrow prefix (`CIDRSet` or `toFQDN`) and this narrower policy rule specifies either `enableDefaultDeny: false` or `- toEntities: all`. Note that a rule specifying `toEntities: world` or `toEntities: 0.0.0.0/0` is insufficient, it must be to entity `all`.This issue has been patched in Cilium v1.14.16 and v1.15.10. As this issue only affects policies using `enableDefaultDeny: false` or that set `toEntities` to `all`, some workarounds are available. For users with policies using `enableDefaultDeny: false`, remove this configuration option and explicitly define any allow rules required. For users with egress policies that explicitly specify `toEntities: all`, use `toEntities: world`.
漏洞公开时间：2024-10-22 03:15:03
漏洞创建时间：2024-10-22 03:29:58
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2024-47825
<details>
<summary>更多参考(点击展开)</summary>
| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| security-advisories.github.com | https://github.com/cilium/cilium/security/advisories/GHSA-3wwx-63fv-pfq6 | |
| github_advisory | https://github.com/cilium/cilium/security/advisories/GHSA-3wwx-63fv-pfq6 | https://github.com/advisories/GHSA-3wwx-63fv-pfq6 |
| github_advisory | https://github.com/cilium/cilium/commit/02d28d9ac9afcaddd301fae6fb4d6cda8c2d0c45 | https://github.com/advisories/GHSA-3wwx-63fv-pfq6 |
| github_advisory | https://github.com/cilium/cilium/commit/9c01afb5646af3f0c696421a410dc66c513b6524 | https://github.com/advisories/GHSA-3wwx-63fv-pfq6 |
| cilium | | https://github.com//cilium/cilium/security/advisories/GHSA-3wwx-63fv-pfq6 |
</details>
漏洞分析指导链接：
https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
漏洞数据来源:
openBrain开源漏洞感知系统
漏洞补丁信息：
<details>
<summary>详情(点击展开)</summary>
| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |
| ------- | -------- | ------- | -------- | --------- |
| | | https://github.com/cilium/cilium/commit/02d28d9ac9afcaddd301fae6fb4d6cda8c2d0c45 | | github_advisory |
| | | https://github.com/cilium/cilium/commit/9c01afb5646af3f0c696421a410dc66c513b6524 | | github_advisory |
</details>
二、漏洞分析结构反馈
影响性分析说明：
openEuler评分：
受影响版本排查(受影响/不受影响)：
1.master(1.14.9):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP1:
4.openEuler-22.03-LTS-SP3:
5.openEuler-22.03-LTS-SP4:
6.openEuler-24.03-LTS:
7.openEuler-24.03-LTS-Next:
修复是否涉及abi变化(是/否)：
1.master(1.14.9):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP1:
4.openEuler-22.03-LTS-SP3:
5.openEuler-22.03-LTS-SP4:
6.openEuler-24.03-LTS:
7.openEuler-24.03-LTS-Next:
openeuler-ci-bot
将计划开始日期设置为2024-10-22
openeuler-ci-bot
将计划截止日期设置为2024-11-21
openeuler-ci-bot
将优先级设置为次要
原值
一、漏洞信息
漏洞编号：[CVE-2024-47825](https://nvd.nist.gov/vuln/detail/CVE-2024-47825)
漏洞归属组件：[cilium](https://gitee.com/src-openeuler/cilium)
漏洞归属的版本：1.11.15,1.11.16,1.14.2,1.14.9,1.7.0
CVSS V3.0分值：
BaseScore：4.0 Medium
Vector：CVSS：3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
漏洞简述：
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.14.0 and prior to versions 1.14.16 and 1.15.10, a policy rule denying a prefix that is broader than `/32` may be ignored if there is a policy rule referencing a more narrow prefix (`CIDRSet` or `toFQDN`) and this narrower policy rule specifies either `enableDefaultDeny: false` or `- toEntities: all`. Note that a rule specifying `toEntities: world` or `toEntities: 0.0.0.0/0` is insufficient, it must be to entity `all`.This issue has been patched in Cilium v1.14.16 and v1.15.10. As this issue only affects policies using `enableDefaultDeny: false` or that set `toEntities` to `all`, some workarounds are available. For users with policies using `enableDefaultDeny: false`, remove this configuration option and explicitly define any allow rules required. For users with egress policies that explicitly specify `toEntities: all`, use `toEntities: world`.
漏洞公开时间：2024-10-22 03:15:03
漏洞创建时间：2024-10-22 03:29:58
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2024-47825
<details>
<summary>更多参考(点击展开)</summary>
| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| security-advisories.github.com | https://github.com/cilium/cilium/security/advisories/GHSA-3wwx-63fv-pfq6 | |
| github_advisory | https://github.com/cilium/cilium/security/advisories/GHSA-3wwx-63fv-pfq6 | https://github.com/advisories/GHSA-3wwx-63fv-pfq6 |
| github_advisory | https://github.com/cilium/cilium/commit/02d28d9ac9afcaddd301fae6fb4d6cda8c2d0c45 | https://github.com/advisories/GHSA-3wwx-63fv-pfq6 |
| github_advisory | https://github.com/cilium/cilium/commit/9c01afb5646af3f0c696421a410dc66c513b6524 | https://github.com/advisories/GHSA-3wwx-63fv-pfq6 |
| cilium | | https://github.com//cilium/cilium/security/advisories/GHSA-3wwx-63fv-pfq6 |
</details>
漏洞分析指导链接：
https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
漏洞数据来源:
openBrain开源漏洞感知系统
漏洞补丁信息：
<details>
<summary>详情(点击展开)</summary>
| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |
| ------- | -------- | ------- | -------- | --------- |
| | | https://github.com/cilium/cilium/commit/02d28d9ac9afcaddd301fae6fb4d6cda8c2d0c45 | | github_advisory |
| | | https://github.com/cilium/cilium/commit/9c01afb5646af3f0c696421a410dc66c513b6524 | | github_advisory |
</details>
二、漏洞分析结构反馈
影响性分析说明：
openEuler评分：
受影响版本排查(受影响/不受影响)：
1.master(1.14.9):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP1:
4.openEuler-22.03-LTS-SP3:
5.openEuler-22.03-LTS-SP4:
6.openEuler-24.03-LTS:
7.openEuler-24.03-LTS-Next:
修复是否涉及abi变化(是/否)：
1.master(1.14.9):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP1:
4.openEuler-22.03-LTS-SP3:
5.openEuler-22.03-LTS-SP4:
6.openEuler-24.03-LTS:
7.openEuler-24.03-LTS-Next:
新值
一、漏洞信息
漏洞编号：[CVE-2024-47825](https://nvd.nist.gov/vuln/detail/CVE-2024-47825)
漏洞归属组件：[cilium](https://gitee.com/src-openeuler/cilium)
漏洞归属的版本：1.11.15,1.11.16,1.14.2,1.14.9,1.7.0
CVSS V3.0分值：
BaseScore：4.0 Medium
Vector：CVSS：3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
漏洞简述：
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.14.0 and prior to versions 1.14.16 and 1.15.10, a policy rule denying a prefix that is broader than `/32` may be ignored if there is a policy rule referencing a more narrow prefix (`CIDRSet` or `toFQDN`) and this narrower policy rule specifies either `enableDefaultDeny: false` or `- toEntities: all`. Note that a rule specifying `toEntities: world` or `toEntities: 0.0.0.0/0` is insufficient, it must be to entity `all`.This issue has been patched in Cilium v1.14.16 and v1.15.10. As this issue only affects policies using `enableDefaultDeny: false` or that set `toEntities` to `all`, some workarounds are available. For users with policies using `enableDefaultDeny: false`, remove this configuration option and explicitly define any allow rules required. For users with egress policies that explicitly specify `toEntities: all`, use `toEntities: world`.
漏洞公开时间：2024-10-22 03:15:03
漏洞创建时间：2024-10-22 03:29:58
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2024-47825
<details>
<summary>更多参考(点击展开)</summary>
| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| security-advisories.github.com | https://github.com/cilium/cilium/security/advisories/GHSA-3wwx-63fv-pfq6 | |
| debian | | https://security-tracker.debian.org/tracker/CVE-2024-47825 |
| github_advisory | https://github.com/cilium/cilium/security/advisories/GHSA-3wwx-63fv-pfq6 | https://github.com/advisories/GHSA-3wwx-63fv-pfq6 |
| github_advisory | https://github.com/cilium/cilium/commit/02d28d9ac9afcaddd301fae6fb4d6cda8c2d0c45 | https://github.com/advisories/GHSA-3wwx-63fv-pfq6 |
| github_advisory | https://github.com/cilium/cilium/commit/9c01afb5646af3f0c696421a410dc66c513b6524 | https://github.com/advisories/GHSA-3wwx-63fv-pfq6 |
| cilium | | https://github.com//cilium/cilium/security/advisories/GHSA-3wwx-63fv-pfq6 |
</details>
漏洞分析指导链接：
https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
漏洞数据来源:
openBrain开源漏洞感知系统
漏洞补丁信息：
<details>
<summary>详情(点击展开)</summary>
| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |
| ------- | -------- | ------- | -------- | --------- |
| | | https://github.com/cilium/cilium/commit/02d28d9ac9afcaddd301fae6fb4d6cda8c2d0c45 | | github_advisory |
| | | https://github.com/cilium/cilium/commit/9c01afb5646af3f0c696421a410dc66c513b6524 | | github_advisory |
</details>
二、漏洞分析结构反馈
影响性分析说明：
openEuler评分：
受影响版本排查(受影响/不受影响)：
1.master(1.14.9):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP1:
4.openEuler-22.03-LTS-SP3:
5.openEuler-22.03-LTS-SP4:
6.openEuler-24.03-LTS:
7.openEuler-24.03-LTS-Next:
修复是否涉及abi变化(是/否)：
1.master(1.14.9):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP1:
4.openEuler-22.03-LTS-SP3:
5.openEuler-22.03-LTS-SP4:
6.openEuler-24.03-LTS:
7.openEuler-24.03-LTS-Next:
原值
一、漏洞信息
漏洞编号：[CVE-2024-47825](https://nvd.nist.gov/vuln/detail/CVE-2024-47825)
漏洞归属组件：[cilium](https://gitee.com/src-openeuler/cilium)
漏洞归属的版本：1.11.15,1.11.16,1.14.2,1.14.9,1.7.0
CVSS V3.0分值：
BaseScore：4.0 Medium
Vector：CVSS：3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
漏洞简述：
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.14.0 and prior to versions 1.14.16 and 1.15.10, a policy rule denying a prefix that is broader than `/32` may be ignored if there is a policy rule referencing a more narrow prefix (`CIDRSet` or `toFQDN`) and this narrower policy rule specifies either `enableDefaultDeny: false` or `- toEntities: all`. Note that a rule specifying `toEntities: world` or `toEntities: 0.0.0.0/0` is insufficient, it must be to entity `all`.This issue has been patched in Cilium v1.14.16 and v1.15.10. As this issue only affects policies using `enableDefaultDeny: false` or that set `toEntities` to `all`, some workarounds are available. For users with policies using `enableDefaultDeny: false`, remove this configuration option and explicitly define any allow rules required. For users with egress policies that explicitly specify `toEntities: all`, use `toEntities: world`.
漏洞公开时间：2024-10-22 03:15:03
漏洞创建时间：2024-10-22 03:29:58
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2024-47825
<details>
<summary>更多参考(点击展开)</summary>
| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| security-advisories.github.com | https://github.com/cilium/cilium/security/advisories/GHSA-3wwx-63fv-pfq6 | |
| debian | | https://security-tracker.debian.org/tracker/CVE-2024-47825 |
| github_advisory | https://github.com/cilium/cilium/security/advisories/GHSA-3wwx-63fv-pfq6 | https://github.com/advisories/GHSA-3wwx-63fv-pfq6 |
| github_advisory | https://github.com/cilium/cilium/commit/02d28d9ac9afcaddd301fae6fb4d6cda8c2d0c45 | https://github.com/advisories/GHSA-3wwx-63fv-pfq6 |
| github_advisory | https://github.com/cilium/cilium/commit/9c01afb5646af3f0c696421a410dc66c513b6524 | https://github.com/advisories/GHSA-3wwx-63fv-pfq6 |
| cilium | | https://github.com//cilium/cilium/security/advisories/GHSA-3wwx-63fv-pfq6 |
</details>
漏洞分析指导链接：
https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
漏洞数据来源:
openBrain开源漏洞感知系统
漏洞补丁信息：
<details>
<summary>详情(点击展开)</summary>
| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |
| ------- | -------- | ------- | -------- | --------- |
| | | https://github.com/cilium/cilium/commit/02d28d9ac9afcaddd301fae6fb4d6cda8c2d0c45 | | github_advisory |
| | | https://github.com/cilium/cilium/commit/9c01afb5646af3f0c696421a410dc66c513b6524 | | github_advisory |
</details>
二、漏洞分析结构反馈
影响性分析说明：
openEuler评分：
受影响版本排查(受影响/不受影响)：
1.master(1.14.9):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP1:
4.openEuler-22.03-LTS-SP3:
5.openEuler-22.03-LTS-SP4:
6.openEuler-24.03-LTS:
7.openEuler-24.03-LTS-Next:
修复是否涉及abi变化(是/否)：
1.master(1.14.9):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP1:
4.openEuler-22.03-LTS-SP3:
5.openEuler-22.03-LTS-SP4:
6.openEuler-24.03-LTS:
7.openEuler-24.03-LTS-Next:
新值
一、漏洞信息
漏洞编号：[CVE-2024-47825](https://nvd.nist.gov/vuln/detail/CVE-2024-47825)
漏洞归属组件：[cilium](https://gitee.com/src-openeuler/cilium)
漏洞归属的版本：1.11.15,1.11.16,1.14.2,1.14.9,1.7.0
CVSS V3.0分值：
BaseScore：4.0 Medium
Vector：CVSS：3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N
漏洞简述：
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.14.0 and prior to versions 1.14.16 and 1.15.10, a policy rule denying a prefix that is broader than `/32` may be ignored if there is a policy rule referencing a more narrow prefix (`CIDRSet` or `toFQDN`) and this narrower policy rule specifies either `enableDefaultDeny: false` or `- toEntities: all`. Note that a rule specifying `toEntities: world` or `toEntities: 0.0.0.0/0` is insufficient, it must be to entity `all`.This issue has been patched in Cilium v1.14.16 and v1.15.10. As this issue only affects policies using `enableDefaultDeny: false` or that set `toEntities` to `all`, some workarounds are available. For users with policies using `enableDefaultDeny: false`, remove this configuration option and explicitly define any allow rules required. For users with egress policies that explicitly specify `toEntities: all`, use `toEntities: world`.
漏洞公开时间：2024-10-22 03:15:03
漏洞创建时间：2024-10-22 03:29:58
漏洞详情参考链接：
https://nvd.nist.gov/vuln/detail/CVE-2024-47825
<details>
<summary>更多参考(点击展开)</summary>
| 参考来源 | 参考链接 | 来源链接 |
| ------- | -------- | -------- |
| security-advisories.github.com | https://github.com/cilium/cilium/security/advisories/GHSA-3wwx-63fv-pfq6 | |
| debian | | https://security-tracker.debian.org/tracker/CVE-2024-47825 |
| github_advisory | https://github.com/cilium/cilium/security/advisories/GHSA-3wwx-63fv-pfq6 | https://github.com/advisories/GHSA-3wwx-63fv-pfq6 |
| github_advisory | https://github.com/cilium/cilium/commit/02d28d9ac9afcaddd301fae6fb4d6cda8c2d0c45 | https://github.com/advisories/GHSA-3wwx-63fv-pfq6 |
| github_advisory | https://github.com/cilium/cilium/commit/9c01afb5646af3f0c696421a410dc66c513b6524 | https://github.com/advisories/GHSA-3wwx-63fv-pfq6 |
| cilium | | https://github.com//cilium/cilium/security/advisories/GHSA-3wwx-63fv-pfq6 |
| go | https://github.com/cilium/cilium/security/advisories/GHSA-3wwx-63fv-pfq6 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3208.yaml |
| go | https://nvd.nist.gov/vuln/detail/CVE-2024-47825 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3208.yaml |
| go | https://github.com/cilium/cilium/commit/02d28d9ac9afcaddd301fae6fb4d6cda8c2d0c45 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3208.yaml |
| go | https://github.com/cilium/cilium/commit/9c01afb5646af3f0c696421a410dc66c513b6524 | https://github.com/golang/vulndb/blob/master/reports/GO-2024-3208.yaml |
</details>
漏洞分析指导链接：
https://gitee.com/openeuler/cve-manager/blob/master/cve-vulner-manager/doc/md/manual.md
漏洞数据来源:
openBrain开源漏洞感知系统
漏洞补丁信息：
<details>
<summary>详情(点击展开)</summary>
| 影响的包 | 修复版本 | 修复补丁 | 问题引入补丁 | 来源 |
| ------- | -------- | ------- | -------- | --------- |
| | | https://github.com/cilium/cilium/commit/02d28d9ac9afcaddd301fae6fb4d6cda8c2d0c45 | | github_advisory |
| | | https://github.com/cilium/cilium/commit/9c01afb5646af3f0c696421a410dc66c513b6524 | | github_advisory |
| | | https://github.com/cilium/cilium/commit/02d28d9ac9afcaddd301fae6fb4d6cda8c2d0c45 | | go |
| | | https://github.com/cilium/cilium/commit/9c01afb5646af3f0c696421a410dc66c513b6524 | | go |
</details>
二、漏洞分析结构反馈
影响性分析说明：
openEuler评分：
受影响版本排查(受影响/不受影响)：
1.master(1.14.9):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP1:
4.openEuler-22.03-LTS-SP3:
5.openEuler-22.03-LTS-SP4:
6.openEuler-24.03-LTS:
7.openEuler-24.03-LTS-Next:
修复是否涉及abi变化(是/否)：
1.master(1.14.9):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP1:
4.openEuler-22.03-LTS-SP3:
5.openEuler-22.03-LTS-SP4:
6.openEuler-24.03-LTS:
7.openEuler-24.03-LTS-Next:
原因说明：
1.master(1.14.9):
2.openEuler-20.03-LTS-SP4:
3.openEuler-22.03-LTS-SP1:
4.openEuler-22.03-LTS-SP3:
5.openEuler-22.03-LTS-SP4:
6.openEuler-24.03-LTS:
7.openEuler-24.03-LTS-Next:
登录 后才可以发表评论