Denial Of Service (DoS)

github.com/cilium/cilium is vulnerable to Denial of Service (DoS). The vulnerability is due to a lack of checks to confirm if the L7 proxy is enabled or disabled before processing the proxyVisibility annotations. When the L7 proxy is disabled, any workload with these annotations can crash the Cilium agent on the node where it’s scheduled, which This results in a Denial of Service (DoS) for that specific node.