5.3

CVE-2025-23028: cilium

CVSS: 5.3v3.1MediumAnalyzed
AliasesCGA-f5p9-x45c-qwfmCGA-mmv9-9w6g-r8rhCGA-ppvx-3xcg-4ffr
Published 22-01-2025Last modified 18-02-2025
Open JSON

Vulnerability summary

CVE-2025-23028 is a medium (CVSS 5.3) vulnerability in cilium. EPSS estimates a 0.43% chance of exploitation in the next 30 days, higher than 36.6% of scored vulnerabilities.

Overall risk
21/100
0100
Low · default modelHow is this calculated?
CVSS score
5.3/10
010
Medium · v3.1 (CVE.org)
EPSS score
0.43%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2 · Related 4
OPENSUSE-SU-2025:14710-1SUSE-SU-2025:0297-1CGA-2HCP-MVXW-GMJ5CGA-9FRH-3C85-283G

Timeline

  1. 22-01-2025
    PublishedVulnerability first disclosed.
  2. 18-02-2025
    Last modifiedVulnerability information updated.

Description

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. A denial of service vulnerability affects versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4. In a Kubernetes cluster where Cilium is configured to proxy DNS traffic, an attacker can crash Cilium agents by sending a crafted DNS response to workloads from outside the cluster. For traffic that is allowed but without using DNS-based policy, the dataplane will continue to pass traffic as configured at the time of the DoS. For workloads that have DNS-based policy configured, existing connections may continue to operate, and new connections made without relying on DNS resolution may continue to be established, but new connections which rely on DNS resolution may be disrupted. Any configuration changes that affect the impacted agent may not be applied until the agent is able to restart. This issue is fixed in Cilium v1.14.18, v1.15.12, and v1.16.5. No known workarounds are available.

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

0.43%

Chance of exploitation in the next 30 days

Percentile

37%

Versus all other CVEs

30-day change

0.00 pp

From 0.43% on 21-09-2026

21-09-202621-10-2026
EPSS score
0.43%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Chainguard4 products
  • cilium-1.15< 1.15.19-r3
  • hubble-ui< 0.13.1-r10
  • hubble-ui-backend< 0.13.1-r10
  • hubble-ui-backend-fips< 0.13.1-r9
Wolfi2 products
  • hubble-ui< 0.13.1-r10
  • hubble-ui-backend< 0.13.1-r10
Cilium1 product
  • cilium≥ 1.14.0, < 1.14.18 | ≥ 1.15.0, < 1.15.12 | ≥ 1.16.0, < 1.16.5
Github.com/cilium1 product
  • cilium≥ 1.14.0, < 1.14.18 | ≥ 1.15.0, < 1.15.12 | ≥ 1.16.0, < 1.16.5

4 vendors · 8 products

References

7 links