CVE-2023-41332

CVSS 3.1 Score 3.5 of 10 (low)

Details

Published Sep 27, 2023
Updated: Sep 29, 2023
CWE ID 755

Summary

CVE-2023-41332 is a vulnerability that affects Cilium, a networking, observability, and security solution with an eBPF-based dataplane. When Cilium's Layer 7 proxy is disabled, creating workloads with specific annotations can cause the Cilium agent to crash on the assigned node. This results in a denial of service on that node, preventing changes to workloads and new workloads from starting. Although existing traffic continues to flow, an attacker may exploit this vulnerability to schedule their own malicious workloads on the targeted node. The issue has been resolved in Cilium versions 1.14.2, 1.13.7, and 1.12.14, and users who are unable to upgrade can mitigate the attack by enabling the Layer 7 proxy feature. The severity of this vulnerability is rated as low by NIST with a CVSS score of 3.5/10.

Leverage our Vulnerability Intelligence module to secure your systems now - get detailed insights on CVE-2024-37364. Book your demo today.

Share

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-41332 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options