5.3

CVE-2023-34242: Cilium vulnerable to information leakage via incorrect ReferenceGrant handling

Modified
AliasesCGA-hmrw-33vq-673qCGA-wwq7-m3fh-96x2GHSA-r7wr-4w5q-55m6
Published 15-06-2023Last modified 11-12-2024

Vulnerability summary

CVE-2023-34242 is a medium (CVSS 5.3) vulnerability in cilium. EPSS estimates a 0.30% chance of exploitation in the next 30 days, higher than 22% of scored vulnerabilities.

Overall risk
21/100
0100
Low · default modelHow is this calculated?
CVSS score
5.3/10
010
Medium · v3.1 (NVD)
EPSS score
0.30%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 0 · Related 2
CGA-69WG-WH59-6RF6CGA-WRR4-CJQ4-9M5H

Timeline

  1. 15-06-2023
    PublishedVulnerability first disclosed.
  2. 11-12-2024
    Last modifiedVulnerability information updated.

Description

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to version 1.13.4, when Gateway API is enabled in Cilium, the absence of a check on the namespace in which a ReferenceGrant is created could result in Cilium unintentionally gaining visibility of secrets (including certificates) and services across namespaces. An attacker on an affected cluster can leverage this issue to use cluster secrets that should not be visible to them, or communicate with services that they should not have access to. Gateway API functionality is disabled by default. This vulnerability is fixed in Cilium release 1.13.4. As a workaround, restrict the creation of `ReferenceGrant` resources to admin users by using Kubernetes RBAC.

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

0.30%

Chance of exploitation in the next 30 days

Percentile

22%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.30% on 22-09-2026

22-09-202622-10-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Chainguard1 product
  • hubble-ui-backend< 0.12.0-r0
Cilium1 product
Github.com/cilium1 product
  • cilium≥ 1.13.0, < 1.13.4
Wolfi1 product
  • hubble-ui-backend< 0.12.0-r0

4 vendors · 4 products

References

5 links