Description (CNA)
Antrea is a Kubernetes networking solution intended to be Kubernetes native. Prior to versions 2.3.2 and 2.4.3, Antrea's network policy priority assignment system has a uint16 arithmetic overflow bug that causes incorrect OpenFlow priority calculations when handling a large numbers of policies with various priority values. This results in potentially incorrect traffic enforcement. This issue has been patched in versions 2.4.3.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| antrea-io / antrea | affected < 2.3.2; affected >= 2.4.0, < 2.4.3 |
CWE
CWE-287, CWE-770
References
- https://github.com/antrea-io/antrea/security/advisories/GHSA-86x4-wp9f-wrr9
- https://github.com/antrea-io/antrea/pull/7496
- https://github.com/antrea-io/antrea/commit/86c4b6010f3be536866f339b632621c23d7186fa
ADP enrichment
No English description supplied.
No references supplied.