Red Hat Security Advisory

RHSA-2023:4623

Red Hat OpenShift Service Mesh 2.2.9 security update

Released 2023-08-11 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2023-12215 CVE-2023-27487

HIGH 78

Envoy is an open source edge and service proxy designed for cloud-native applications.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00636 Published 2023-04-04 Partial fix · 1.25.3, 1.24.4 +2 CWE-20

TI-2023-12221 CVE-2023-27493

HIGH 74

Envoy is an open source edge and service proxy designed for cloud-native applications.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00507 Published 2023-04-04 Partial fix · 1.25.3, 1.24.4 +2 CWE-20

TI-2023-12219 CVE-2023-27491

HIGH 72

Envoy is an open source edge and service proxy designed for cloud-native applications.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00876 Published 2023-04-04 Partial fix · 1.25.3, 1.24.4 +2 CWE-20

TI-2023-12220 CVE-2023-27492

MEDIUM 62

Envoy is an open source edge and service proxy designed for cloud-native applications.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00686 Published 2023-04-04 Partial fix · 1.25.3, 1.24.4 +2 CWE-770

TI-2023-12216 CVE-2023-27488

MEDIUM 43

Envoy is an open source edge and service proxy designed for cloud-native applications.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00731 Published 2023-04-04 Partial fix · 1.25.3, 1.24.4 +2 CWE-20

TI-2023-12224 CVE-2023-27496

LOW 34

Envoy is an open source edge and service proxy designed for cloud-native applications.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00758 Published 2023-04-04 Partial fix · 1.25.3, 1.24.4 +2 CWE-20