Vulnerabilities

TI-2023-21972 CVE-2023-41378 · GHSA-5r5h-q934-cccp

Calico Typha hangs during unclean TLS handshake

MEDIUM 41

In certain conditions for Calico Typha (v3.26.2, v3.25.1 and below), and Calico Enterprise Typha (v3.17.1, v3.16.3, v3.15.3 and below), a client TLS handshake can block the Calico Typha server indefinitely, resulting in…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00892 Published 2023-11-06 Fixed in 3.26.3 CWE-400

TI-2022-11010 CVE-2022-28224 · GHSA-9394-xfq9-6qrp

Calico and Calico Enterprise may be vulnerable to route hijacking with the floating IP feature

LOW 26

Clusters using Calico (version 3.22.1 and below), Calico Enterprise (version 3.12.0 and below), may be vulnerable to route hijacking with the floating IP feature.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00615 Published 2022-06-06 Fixed in 3.22.2, 3.21.5 +1 CWE-200

Vulnerabilities

Filters

Calico Typha hangs during unclean TLS handshake

Calico and Calico Enterprise may be vulnerable to route hijacking with the floating IP feature