Incorrect Default Permissions Vulnerability in Cilium
Summary
CVE-2022-29178: Incorrect Default Permissions in Cilium. Affects cilium across 3 version ranges.
< 1.9.16
>= 1.10.0, < 1.10.11
>= 1.11.0, < 1.11.5
Fixed in 1.9.16, 1.10.11 or 1.11.5, depending on the release line you run. How to fix ↓
Also tracked for
- github.com/cilium/cilium · Go
- hubble-ui · Bitnami
- hubble-ui-backend · Bitnami
- cilium-proxy · Bitnami
- hubble · Bitnami
- hubble-relay · Bitnami
- cilium-operator · Bitnami
- github.com/cilium/cilium · Go
The same CVE-2022-29178 is tracked separately for each ecosystem and vendor. Its fix information is the same; the package and affected versions differ.
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Cilium is an open source software that provides network connectivity and load balancing for application workloads. It is designed to enhance security in network communication. However, prior to versions 1.9.16, 1.10.11, and 1.11.15, Cilium had an incorrect default permissions vulnerability. This vulnerability allowed users belonging to the group ID 1000 to access the Cilium API via a Unix domain socket on the host where Cilium is running. This could potentially compromise the integrity and availability of the system on that host.
Vulnerability Detail
The incorrect default permissions vulnerability in Cilium allowed unauthorized users to access the API, which could lead to various security issues. Malicious users could exploit this vulnerability to compromise the integrity of the system and disrupt its availability. This vulnerability has been addressed in versions 1.9.16, 1.10.11, and 1.11.5 of Cilium.
How To Fix
Fixed versions by release line
The minimum fixed version depends on the release line you run.
-
< 1.9.161.9.16 -
>= 1.10.0, < 1.10.111.10.11 -
>= 1.11.0, < 1.11.51.11.5
Tip — Not sure which release line you're on? Vulert can find the fix for the version you are using. Scan free →
Workaround
A potential workaround for this vulnerability is to modify Cilium's DaemonSet to run with a specific command. The command can be found in the GitHub Security Advisory for this vulnerability. Implementing this workaround can help mitigate the risk until the software is updated to a patched version.
Conclusion
The incorrect default permissions vulnerability in Cilium can be mitigated by updating the software to one of the patched versions. Additionally, a workaround is available to modify Cilium's DaemonSet. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for cilium →
FAQ
Cilium is open source software that provides network connectivity and load balancing for application workloads.
The vulnerability allows unauthorized users to access the Cilium API, potentially compromising the integrity and availability of the system.
Versions prior to 1.9.16, 1.10.11, and 1.11.15 are affected by this vulnerability.
Update Cilium to one of the patched versions: 1.9.16, 1.10.11, or 1.11.5.
Yes, a workaround is to modify Cilium's DaemonSet to run with a specific command. Details can be found in the GitHub Security Advisory.
References
Related vulnerabilities
Recent vulnerabilities recorded for cilium.
