Red Hat Security Advisory

RHSA-2022:1275

Red Hat OpenShift Service Mesh 2.1.2 security update

Released 2022-04-07 · Red Hat rating Important · View on Red Hat →

Fixed in

OpenShift Service Mesh 2.1 servicemesh-2.1.2-4.el8, servicemesh-cni-2.1.2-4.el8, servicemesh-pilot-agent-2.1.2-4.el8 +3

TI-2022-06032 CVE-2022-21654

MEDIUM 45

Envoy is an open source edge and service proxy, designed for cloud-native applications.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01087 Published 2022-02-22 Fixed in 1.18.6, 1.19.3 +2 CWE-295

TI-2022-08541 CVE-2022-24726

MEDIUM 42

Istio is an open platform to connect, manage, and secure microservices.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01591 Published 2022-03-10 Partial fix · 1.12.5, 1.13.2 CWE-400

TI-2022-07687 CVE-2022-23635 · GHSA-856q-xv3c-7f2f

MEDIUM 42

Istio is an open platform to connect, manage, and secure microservices.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01651 Published 2022-02-22 Fixed in 1.13.1, 1.12.4 +1 CWE-287

TI-2022-06033 CVE-2022-21655

MEDIUM 41

Envoy is an open source edge and service proxy, designed for cloud-native applications.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01145 Published 2022-02-22 Fixed in 1.18.6, 1.19.3 +2 CWE-670

TI-2021-19632 CVE-2021-43826

MEDIUM 41

Envoy is an open source edge and service proxy, designed for cloud-native applications.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01062 Published 2022-02-22 Fixed in 1.18.6, 1.19.3 +2 CWE-416

TI-2021-19630 CVE-2021-43824

MEDIUM 41

Envoy is an open source edge and service proxy, designed for cloud-native applications.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01062 Published 2022-02-22 Fixed in 1.20.2, 1.19.3 +2 CWE-476

TI-2021-19631 CVE-2021-43825

LOW 34

Envoy is an open source edge and service proxy, designed for cloud-native applications.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00877 Published 2022-02-22 Fixed in 1.18.6, 1.19.3 +2 CWE-416

TI-2022-07659 CVE-2022-23606

LOW 31

Envoy is an open source edge and service proxy, designed for cloud-native applications.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.01016 Published 2022-02-22 Fixed in 1.20.2, 1.21.1 CWE-674