EUVD-2024-2669Published
Cilium vulnerable to information leakage via incorrect ReferenceGrant update logic in Gateway API
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2024-42486 · CVE overview and exploitation status
BIT-cilium-operator-2024-42486
cve-program · CVE-2024-42486
- https://github.com/cilium/cilium/security/advisories/GHSA-vwf8-q6fw-4wcm
- https://github.com/cilium/cilium/pull/34032
- https://github.com/cilium/cilium/commit/ed3dfa0aab8b80f7e841a6d49d2a990ac2dca053
euvd · EUVD-2024-2669
- https://github.com/cilium/cilium/security/advisories/GHSA-vwf8-q6fw-4wcm
- https://github.com/cilium/cilium/pull/34032
- https://github.com/cilium/cilium/commit/ed3dfa0aab8b80f7e841a6d49d2a990ac2dca053
nvd · CVE-2024-42486
- https://github.com/cilium/cilium/commit/ed3dfa0aab8b80f7e841a6d49d2a990ac2dca053
- https://github.com/cilium/cilium/pull/34032
- https://github.com/cilium/cilium/security/advisories/GHSA-vwf8-q6fw-4wcm
osv · GHSA-vwf8-q6fw-4wcm
- https://github.com/cilium/cilium/security/advisories/GHSA-vwf8-q6fw-4wcm
- https://nvd.nist.gov/vuln/detail/CVE-2024-42486
- https://github.com/cilium/cilium/pull/34032
- https://github.com/cilium/cilium/commit/414a96b53d51ef6e6645c44426e26bc8e7c7c059
- https://github.com/cilium/cilium/commit/92c110e58a7be6586819dd51fb0f6ee1ec4be8f8
- https://github.com/cilium/cilium/commit/ed3dfa0aab8b80f7e841a6d49d2a990ac2dca053
- https://github.com/cilium/cilium
osv · GO-2024-3074
- https://github.com/cilium/cilium/security/advisories/GHSA-vwf8-q6fw-4wcm
- https://nvd.nist.gov/vuln/detail/CVE-2024-42486
- https://github.com/cilium/cilium/commit/414a96b53d51ef6e6645c44426e26bc8e7c7c059
- https://github.com/cilium/cilium/commit/92c110e58a7be6586819dd51fb0f6ee1ec4be8f8
- https://github.com/cilium/cilium/commit/ed3dfa0aab8b80f7e841a6d49d2a990ac2dca053
- https://github.com/cilium/cilium/pull/34032
Related changes
Linked by CVE identifier- Release 2025-01-30 · Tool release · 14 Feb 2025