Affected by GO-2026-4856 and 3 other vulnerabilities

GO-2026-4856: Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic in github.com/cilium/cilium

GO-2026-5400: Cillium exposes sensitive information included in the cilium-bugtool debug archive in github.com/cilium/cilium

GO-2026-5905: Cilium vulnerable to sensitive information disclosure and cluster disruption via local Envoy admin socket access in github.com/cilium/cilium

GO-2026-5914: CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation in github.com/cilium/cilium

ipsec

package

v1.17.0-rc.2 Latest Latest Go to latest Published: Jan 24, 2025 License: Apache-2.0 Imports: 4 Imported by: 0

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/cilium/cilium

Links

Documentation ¶

Index ¶

func CountUniqueIPsecKeys(states []netlink.XfrmState) (int, error)
func CountXfrmPoliciesByDir(states []netlink.XfrmPolicy) (int, int, int)
func CountXfrmStatesByDir(states []netlink.XfrmState) (int, int)
func GetNodeIDFromXfrmMark(mark *netlink.XfrmMark) uint16
func GetSPIFromXfrmPolicy(policy *netlink.XfrmPolicy) uint8

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func CountUniqueIPsecKeys ¶

func CountUniqueIPsecKeys(states []netlink.XfrmState) (int, error)

func CountXfrmPoliciesByDir ¶

func CountXfrmPoliciesByDir(states []netlink.XfrmPolicy) (int, int, int)

func CountXfrmStatesByDir ¶

func CountXfrmStatesByDir(states []netlink.XfrmState) (int, int)

func GetNodeIDFromXfrmMark ¶

func GetNodeIDFromXfrmMark(mark *netlink.XfrmMark) uint16

func GetSPIFromXfrmPolicy ¶

func GetSPIFromXfrmPolicy(policy *netlink.XfrmPolicy) uint8

Types ¶

This section is empty.

Source Files ¶

View all Source files

utils.go