CVE-2025-64715

{
  "id": "CVE-2025-64715",
  "sourceIdentifier": "[email protected]",
  "published": "2025-11-29T01:16:01.427",
  "lastModified": "2026-10-19T13:10:00.110",
  "vulnStatus": "Analyzed",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Prior to versions 1.16.17, 1.17.10, and 1.18.4, CiliumNetworkPolicys which use egress.toGroups.aws.securityGroupsIds to reference AWS security group IDs that do not exist or are not attached to any network interface may unintentionally allow broader outbound access than intended by the policy authors. In such cases, the toCIDRset section of the derived policy is not generated, which means outbound traffic may be permitted to more destinations than originally intended. This issue has been patched in versions 1.16.17, 1.17.10, and 1.18.4. There are no workarounds for this issue."
    },
    {
      "lang": "es",
      "value": "Cilium es una solución de red, observabilidad y seguridad con un plano de datos basado en eBPF. Versiones anteriores a la 1.16.17, 1.17.10 y 1.18.4, las CiliumNetworkPolicys que utilizan egress.toGroups.aws.securityGroupsIds para referenciar IDs de grupos de seguridad de AWS que no existen o no están adjuntos a ninguna interfaz de red pueden permitir, de forma no intencionada, un acceso de salida más amplio del previsto por los autores de la política. En tales casos, la sección toCIDRset de la política derivada no se genera, lo que significa que el tráfico de salida puede permitirse a más destinos de los previstos originalmente. Este problema ha sido parcheado en las versiones 1.16.17, 1.17.10 y 1.18.4. No existen soluciones alternativas para este problema."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "cilium",
          "product": "cilium",
          "versions": [
            {
              "version": "< 1.16.17",
              "status": "affected"
            },
            {
              "version": ">= 1.17.0, < 1.17.10",
              "status": "affected"
            },
            {
              "version": ">= 1.18.0, < 1.18.4",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "baseScore": 4.0,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 2.5,
        "impactScore": 1.4
      },
      {
        "source": "[email protected]",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
          "baseScore": 5.5,
          "baseSeverity": "MEDIUM",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2025-12-01T18:48:58.687369Z",
          "id": "CVE-2025-64715",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-284"
        }
      ]
    },
    {
      "source": "[email protected]",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cilium:cilium:*:*:*:*:*:*:*:*",
              "versionEndExcluding": "1.16.17",
              "matchCriteriaId": "4A7D5E2F-7DF6-4EBE-8E0C-63C0C39D8D29"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cilium:cilium:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "1.17.0",
              "versionEndExcluding": "1.17.10",
              "matchCriteriaId": "BD15500F-5958-45C4-BF78-9756FEB4CB2F"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:cilium:cilium:*:*:*:*:*:*:*:*",
              "versionStartIncluding": "1.18.0",
              "versionEndExcluding": "1.18.4",
              "matchCriteriaId": "C2C4B9B4-3CB3-47A3-ACF9-195E77B2FE2B"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/cilium/cilium/commit/a385856b59c8289cc7273fa3a3062bbf0ef96c97",
      "source": "[email protected]",
      "tags": [
        "Patch"
      ]
    },
    {
      "url": "https://github.com/cilium/cilium/releases/tag/v1.16.17",
      "source": "[email protected]",
      "tags": [
        "Release Notes"
      ]
    },
    {
      "url": "https://github.com/cilium/cilium/releases/tag/v1.17.10",
      "source": "[email protected]",
      "tags": [
        "Release Notes"
      ]
    },
    {
      "url": "https://github.com/cilium/cilium/releases/tag/v1.18.4",
      "source": "[email protected]",
      "tags": [
        "Release Notes"
      ]
    },
    {
      "url": "https://github.com/cilium/cilium/security/advisories/GHSA-38pp-6gcp-rqvm",
      "source": "[email protected]",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ]
    }
  ]
}