Red Hat Security Advisory

RHSA-2020:2148

Red Hat OpenShift Service Mesh 1.1.2 Service Mesh Proxy security update

Released 2020-05-13 · Red Hat rating Important · View on Red Hat →

Fixed in

OpenShift Service Mesh 1.1 servicemesh-proxy-1.1.2-2.el8

Fixes 1 record

TI-2020-08638 CVE-2020-10739 · GHSA-wr89-rp47-qc87

NULL pointer dereference in istio.io istio/envoy

LOW 37

Istio 1.4.x before 1.4.9 and Istio 1.5.x before 1.5.4 contain the following vulnerability when telemetry v2 is enabled: by sending a specially crafted packet, an attacker could trigger a Null Pointer Exception resulting…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02389 Published 2020-06-02 Fixed in 1.4.9, 1.5.4 CWE-476