CVE-2024-28248

Summary

CVE-2024-28248 is a vulnerability affecting Cilium, a networking, observability, and security solution with an eBPF-based dataplane. Versions 1.13.9 and prior to 1.13.13, 1.14.8, and 1.15.2 of Cilium exhibit inconsistent application of HTTP policies, resulting in intermittent forwarding of HTTP traffic that should have been dropped. This issue poses a security risk and has been addressed through patches in versions 1.15.2, 1.14.8, and 1.13.13. No known workarounds exist for affected versions.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.