Red Hat Security AdvisoryRHSA-2020:2864
Red Hat OpenShift Service Mesh 1.0 servicemesh-proxy security update
Released 2020-07-07 · Red Hat rating Important · View on Red Hat →
Fixed in
- OpenShift Service Mesh 1.0 servicemesh-proxy-1.0.11-1.el8
Fixes 4 records
Priority LOW 36
Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when processing HTTP/1.1 headers with long field names or requests with long URLs.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01448 · Published 2020-07-01 · Fixed CWE-770
Priority LOW 36
Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier is susceptible to increased memory usage in the case where an HTTP/2 client requests a large payload but does not send enough window updates to consume the entire stream an…
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01703 · Published 2020-07-01 · Fixed CWE-401
Priority LOW 36
Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when proxying HTTP/2 requests or responses with many small (i.e.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01448 · Published 2020-07-01 · Fixed CWE-400
Priority LOW 36
Envoy version 1.14.2, 1.13.2, 1.12.4 or earlier may exhaust file descriptors and/or memory when accepting too many connections.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01475 · Published 2020-07-01 · Fixed CWE-400