Affected by GO-2024-2568 and 12 other vulnerabilities

GO-2024-2568: Unencrypted ingress/health traffic when using Wireguard transparent encryption in github.com/cilium/cilium

GO-2024-2569: Unencrypted traffic between pods when using Wireguard and an external kvstore in github.com/cilium/cilium

GO-2024-2653: HTTP policy bypass in github.com/cilium/cilium

GO-2024-2656: Unencrypted traffic between nodes with IPsec in github.com/cilium/cilium

GO-2024-2657: Unencrypted traffic between nodes with WireGuard in github.com/cilium/cilium

GO-2024-2666: Insecure IPsec transparent encryption in github.com/cilium/cilium

GO-2024-2922: Cilium leaks sensitive information in cilium-bugtool in github.com/cilium/cilium

GO-2024-3072: Policy bypass for Host Firewall policy due to race condition in Cilium agent in github.com/cilium/cilium

GO-2024-3208: Cilium's CIDR deny policies may not take effect when a more narrow CIDR allow is present in github.com/cilium/cilium

GO-2025-3415: DoS in Cilium agent DNS proxy from crafted DNS responses in github.com/cilium/cilium

GO-2025-3416: Cilium has an information leakage via insecure default Hubble UI CORS header in github.com/cilium/cilium

GO-2025-3635: In Cilium, packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters in github.com/cilium/cilium

GO-2025-4167: Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic in Ciliumgithub.com/cilium/cilium

eventsmap

package

v1.14.2 Latest Latest Go to latest Published: Sep 11, 2023 License: Apache-2.0 Imports: 8 Imported by: 3

Details

Valid go.mod file
Redistributable license
Tagged version
Stable version
Learn more about best practices

Repository

github.com/cilium/cilium

Links

Documentation ¶

Overview ¶

Package eventsmap represents the perf event map used by the datapath to send events to the Cilium agent. It is primarily managed from the datapath; Cilium side is used to create the map only. +groupName=maps

Index ¶

Constants
Variables
type Key
- func (k *Key) New() bpf.MapKey
- func (k *Key) String() string
type Map
type Value
- func (v *Value) New() bpf.MapValue
- func (v *Value) String() string

Constants ¶

View Source

const (
	// MapName is the BPF map name.
	MapName = "cilium_events"
)

Variables ¶

View Source

var Cell = cell.Module(
	"events-map",
	"eBPF ring buffer of cilium events",

	cell.Provide(newEventsMap),
)

Cell provides eventsmap.Map, which is the hive representation of the cilium events perf event ring buffer.

View Source

var (
	MaxEntries int
)

Functions ¶

This section is empty.

Types ¶

type Key ¶

type Key struct {
	// contains filtered or unexported fields
}

Key is the index into the prog array map.

func (*Key) New ¶

func (k *Key) New() bpf.MapKey

func (*Key) String ¶

func (k *Key) String() string

String converts the key into a human readable string format.

type Map ¶

type Map interface{}

type Value ¶

type Value struct {
	// contains filtered or unexported fields
}

Value is the program ID in the prog array map.

func (*Value) New ¶

func (v *Value) New() bpf.MapValue

func (*Value) String ¶

func (v *Value) String() string

String converts the value into a human readable string format.

Source Files ¶

View all Source files

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL