Affected by GO-2022-0457 and 16 other vulnerabilities

GO-2022-0457: Access to Unix domain socket can lead to privileges escalation in Cilium in github.com/cilium/cilium

GO-2022-0458: Improper Privilege Management in Cilium in github.com/cilium/cilium

GO-2022-0959: Network Policies & (Clusterwide) Cilium Network Policies with namespace label selectors may unexpectedly select pods with maliciously crafted labels in github.com/cilium/cilium

GO-2023-1643: Potential network policy bypass when routing IPv6 traffic in github.com/cilium/cilium

GO-2023-1730: Debug mode leaks confidential data in Cilium in github.com/cilium/cilium

GO-2023-1785: Potential HTTP policy bypass when using header rules in Cilium in github.com/cilium/cilium

GO-2023-2078: Kubernetes users may update Pod labels to bypass network policy in github.com/cilium/cilium

GO-2023-2079: Specific Cilium configurations vulnerable to DoS via Kubernetes annotations in github.com/cilium/cilium

GO-2023-2080: Cilium vulnerable to bypass of namespace restrictions in CiliumNetworkPolicy in github.com/cilium/cilium

GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

GO-2025-4167: Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic in Ciliumgithub.com/cilium/cilium

GO-2026-4856: Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic in github.com/cilium/cilium

GO-2026-5400: Cillium exposes sensitive information included in the cilium-bugtool debug archive in github.com/cilium/cilium

GO-2026-5905: Cilium vulnerable to sensitive information disclosure and cluster disruption via local Envoy admin socket access in github.com/cilium/cilium

GO-2026-5914: CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation in github.com/cilium/cilium

netns

package

v1.8.9 Latest Latest Go to latest Published: Apr 20, 2021 License: Apache-2.0 Imports: 7 Imported by: 18

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/cilium/cilium

Links

Documentation ¶

Overview ¶

Package netns contains various utility functions to work with network namespaces

Index ¶

func ListNamedNetNSWithPrefix(prefix string) ([]string, error)
func RemoveIfFromNetNSIfExists(netNS ns.NetNS, ifName string) error
func RemoveIfFromNetNSWithNameIfBothExist(netNSName, ifName string) error
func RemoveNetNSWithName(netNSName string) error
func ReplaceNetNSWithName(netNSName string) (ns.NetNS, error)

Constants ¶

This section is empty.

Variables ¶

This section is empty.

Functions ¶

func ListNamedNetNSWithPrefix ¶

func ListNamedNetNSWithPrefix(prefix string) ([]string, error)

ListNamedNetNSWithPrefix returns list of named network namespaces which name starts with the given prefix.

func RemoveIfFromNetNSIfExists ¶

func RemoveIfFromNetNSIfExists(netNS ns.NetNS, ifName string) error

RemoveIfFromNetNSIfExists removes the given interface from the given network namespace.

If the interface does not exist, no error will be returned.

func RemoveIfFromNetNSWithNameIfBothExist ¶ added in v1.6.0

func RemoveIfFromNetNSWithNameIfBothExist(netNSName, ifName string) error

RemoveIfFromNetNSWithNameIfBothExist removes the given interface from the given network namespace identified by its name.

If either the interface or the namespace do not exist, no error will be returned.