Detections
Analytics

SCA: security update for github.com/cilium/cilium (GHSA-3wwx-63fv-pfq6)

high Tenable Self-Hosted Container Security Plugin ID 409747

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in
 version 1.14.0 and prior to versions 1.14.16 and 1.15.10, a policy rule denying a prefix that is broader
 than `/32` may be ignored if there is a policy rule referencing a more narrow prefix (`CIDRSet` or
 `toFQDN`) and this narrower policy rule specifies either `enableDefaultDeny: false` or `- toEntities:
 all`. Note that a rule specifying `toEntities: world` or `toEntities: 0.0.0.0/0` is insufficient, it must
 be to entity `all`.This issue has been patched in Cilium v1.14.16 and v1.15.10. As this issue only affects
 policies using `enableDefaultDeny: false` or that set `toEntities` to `all`, some workarounds are
 available. For users with policies using `enableDefaultDeny: false`, remove this configuration option and
 explicitly define any allow rules required. For users with egress policies that explicitly specify
 `toEntities: all`, use `toEntities: world`. (CVE-2024-47825)

See Also

https://github.com/advisories/GHSA-3wwx-63fv-pfq6

Plugin Details

Severity: High

ID: 409747

Version: Revision 1.7

Type: Local

Family: SCA Checks

Published: 1/23/2025

Updated: 7/2/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: Medium

Score: 4.8

Percentile: 57.36

Vendor

Vendor Severity: Medium

CVSS v2

Risk Factor: High

Base Score: 7.1

Temporal Score: 5.3

Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:N

CVSS Score Source: CVE-2024-47825

CVSS v3

Risk Factor: High

Base Score: 8.7

Temporal Score: 7.6

Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

Exploit Ease: No known exploits are available

Patch Publication Date: 10/21/2024

Vulnerability Publication Date: 10/21/2024

Reference Information

CVE: CVE-2024-47825