CVE-2023-41332
CVSS 3.1 Score 3.5 of 10 (low)
Details
Summary
CVE-2023-41332 is a vulnerability that affects Cilium, a networking, observability, and security solution with an eBPF-based dataplane. When Cilium's Layer 7 proxy is disabled, creating workloads with specific annotations can cause the Cilium agent to crash on the assigned node. This results in a denial of service on that node, preventing changes to workloads and new workloads from starting. Although existing traffic continues to flow, an attacker may exploit this vulnerability to schedule their own malicious workloads on the targeted node. The issue has been resolved in Cilium versions 1.14.2, 1.13.7, and 1.12.14, and users who are unable to upgrade can mitigate the attack by enabling the Layer 7 proxy feature. The severity of this vulnerability is rated as low by NIST with a CVSS score of 3.5/10.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions