Red Hat Security AdvisoryRHSA-2019:3041
Red Hat OpenShift Service Mesh 1.0.1 RPMs
Released 2019-10-14 · Red Hat rating Important · View on Red Hat →
Fixed in
- OpenShift Service Mesh 1.0 servicemesh-1.0.1-8.el8, servicemesh-citadel-1.0.1-8.el8, servicemesh-cni-1.0.1-8.el8 +12
- Red Hat OpenShift Service Mesh 1.0 kiali-v1.0.6.redhat1-1.el7
Fixes 2 records
Priority HIGH 73
Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.81556 · Published 2019-08-13 · Partial fix CWE-400
Priority HIGH 67
Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.59547 · Published 2019-08-13 · Partial fix CWE-400
