Skip to main content
CVE-2024-45337VulnerabilityPublished Updated

SUSE · Security update for cloudflared

Affects SUSESource GCVE Database

0
Compare

Mentioned vulnerabilities

Not known to be exploited.

Data as of 10 Nov 2026, 20:06 UTC

Severity
High

Rated by Threat Radar · No CVSS score from NVD or the CNA

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 2 Jun 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 10 Nov 2026.

Description

This update for cloudflared fixes the following issues: Changes in cloudflared: - Update version to 2026.5.2 * Add more information to proxy-dns removal message * Update tail command to use /management/logs endpoint * Add cloudflared management token command * Fix bugs * Update golang.org/x/net to 0.55.0 (boo#1266794, boo#1265920, CVE-2026-39821 CVE-2026-33814) - Update version to 2026.2.0 * Fix bugs - Update version to 2025.11.1 * bump coredns to solve CVE * add vulncheck to cloudflared * Remove references to cloudflare-go * Add logging format as JSON * Centralize UDP origin proxy dialing as ingress service * Add virtual DNS service * Add OriginDialerService to include TCP * Add --dns-resolver-addrs flag * Remove P256Kyber768Draft00PQKex curve from nonFips curve preferences * Bump go-boring from 1.24.2 to 1.24.4 * Add metrics for virtual DNS origin * set proper url and hostname for cloudflared tail command * Add support for login interstitial auto closure * update fed callback url for login helper * Correct QUIC connection management for datagram handlers * Set endpoint in tunnel credentials when generating locally managed tunnel with a Fed token * Migrate cloudflared-ci pipelines to Gitlab CI * Add support for FedRAMP in originRequest Access config * Add buffers for UDP and ICMP datagrams in datagram v3 * Add write deadline for UDP origin writes * Improve metrics for datagram v3 * Force usage of go-boring 1.24 * Fix import of GPG keys when two keys are provided * Fix parameter order when uploading RPM .repo file to R2 * Add new datagram v3 feature flag * Bump datagram v3 write channel capacity * Fix upload of RPM repo file during double signing * Fix the cloudflared binary path used in the component test * Fix typo causing r2-release-next deployment to fail * Update from go1.24.6 to go1.24.9 * Fix systemd service installation hanging * Add cf-proxy-* to control response headers * Add pipelines for linux packaging * Prefix gitlab steps with operating system * Fix docker hub push step * Fix CVE-2025-58181 boo#1253918 * Fix CVE-2025-22869 boo#1239422 - Update version to 2025.6.0 * Remove dynamic reloading of features for datagram v3 * Add metric for unsupported RPC commands for datagram v3 * Add dynamic loading of features to connections via ConnectionOptionsSnapshot * Use is_default_network instead of is_default to create vnet's * Update go to 1.24 - Update version to 2025.4.2 * emit explicit errors for the service command on unsupported OSes * Fix some issues - Update version to 2024.12.1 * TUN-8748: Migrated datagram V3 flows to use migrated context * TUN-8737: update metrics server port selection * TUN-8731: Implement diag/system endpoint * TUN-8728: implement diag/tunnel endpoint * TUN-8730: implement diag/configuration * TUN-8735: add managed/local log collection * TUN-8733: add log collection for docker * TUN-8734: add log collection for kubernetes * TUN-8640: Refactor ICMPRouter to support new ICMPResponders * TUN-8729: implement network collection for diagnostic procedure * TUN-8727: implement metrics, runtime, system, and tunnelstate in diagnostic http client * TUN-8726: implement compression routine to be used in diagnostic procedure * TUN-8732: implement port selection algorithm * TUN-8762: fix argument order when invoking tracert and modify network info output parsing * TUN-8769: fix k8s log collector arguments * TUN-8727: extend client to include function to get cli configuration and tunnel configuration * TUN-8725: implement diagnostic procedure * TUN-8767: include raw output from network collector in diagnostic zip file * TUN-8770: add cli configuration and tunnel configuration to diagnostic zipfile * TUN-8768: add job report to diagnostic zipfile * TUN-8775: Make sure the session Close can only be called once * TUN-8781: Add Trixie, drop Buster. Default to Bookworm * TUN-8640: Add ICMP support for datagram V3 * TUN-8789: make python package installation consistent * TUN-8795: update createrepo to createrepo_c to fix the release_pkgs.py script - fix CVE-2024-45337 and boo#1234582 - Update version to 2024.11.1 * Add cloudflared tunnel health command * PPIP-2310: Update quick tunnel disclaimer * TUN-8621: Prevent QUIC connection from closing before grace period after unregistering * TUN-8484: Print response when QuickTunnel can't be unmarshalled * TUN-8592: Use metadata from the edge to determine if request body is empty for QUIC transport * TUN-8621: Fix cloudflared version in change notes to account for release date * TUN-8638: Add datagram v3 serializers and deserializers * TUN-8685: Bump coredns dependency * TUN-8688: Correct UDP bind for IPv6 edge connectivity on macOS * TUN-8694: Fix github release script * TUN-8694: Rework release script * TUN-8661: Refactor connection meth

References

Community reviews

Loading reviews…