TI-2022-11768 CVE-2022-29225
Zip bomb vulnerability in Envoy
Priority HIGH 72
Envoy is a cloud-native high-performance proxy.
RHSA-2022:5004
Red Hat OpenShift Service Mesh 2.1.3 security update
Released 2022-06-13 · Red Hat rating Critical · View on Red Hat →
Fixed in
- OpenShift Service Mesh 2.1 servicemesh-2.1.3-1.el8, servicemesh-cni-2.1.3-1.el8, servicemesh-operator-2.1.3-2.el8 +6
Fixes 8 records
TI-2022-11769 CVE-2022-29226
Trivial authentication bypass in Envoy
Priority MEDIUM 52
Envoy is a cloud-native high-performance proxy.
TI-2022-07828 CVE-2022-23806 · GHSA-8c83-vp4v-h7fq
Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can…
Priority MEDIUM 45
Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.
TI-2022-13090 CVE-2022-31045 · GHSA-xwx5-5c9g-x68x
Ill-formed headers may lead to unexpected behavior in Istio
Priority MEDIUM 44
Istio is an open platform to connect, manage, and secure microservices.
TI-2022-11771 CVE-2022-29228
Reachable assertion in Envoy
Priority MEDIUM 41
Envoy is a cloud-native high-performance proxy.
TI-2022-07809 CVE-2022-23773 · GHSA-52j8-p7r3-733m
cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that…
Priority LOW 38
cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags.
TI-2022-07808 CVE-2022-23772 · GHSA-q99m-p7hq-5v4f
Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow…
Priority LOW 38
Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.
TI-2022-11767 CVE-2022-29224
Segmentation fault leading to crash in Envoy
Priority LOW 28
Envoy is a cloud-native high-performance proxy.