CVE-2024-28248

Name of the Vulnerable Software and Affected Versions Cilium versions 1.13.9 through 1.13.12 Cilium versions 1.14.0 through 1.14.7 Cilium versions 1.15.0 through 1.15.1

Description Cilium's HTTP policies are not consistently applied to all traffic in the scope of the policies, leading to HTTP traffic being incorrectly and intermittently forwarded when it should be dropped.

Recommendations For Cilium versions 1.13.9 through 1.13.12, update to version 1.13.13 to resolve the issue. For Cilium versions 1.14.0 through 1.14.7, update to version 1.14.8 to resolve the issue. For Cilium versions 1.15.0 through 1.15.1, update to version 1.15.2 to resolve the issue.