Red Hat Security Advisory

RHSA-2023:4624

Red Hat OpenShift Service Mesh Containers for 2.3.6 security update

Released 2023-08-11 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2023-18002 CVE-2023-35941

HIGH 75

Envoy is an open source edge and service proxy designed for cloud-native applications.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00814 Published 2023-07-25 Fixed in 1.26.4, 1.25.9 +2 CWE-116

TI-2023-18006 CVE-2023-35945

HIGH 72

Envoy is a cloud-native high-performance edge/middle/service proxy.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01652 Published 2023-07-13 Fixed in 1.26.3, 1.25.8 +2 CWE-400

TI-2023-18005 CVE-2023-35944

HIGH 71

Envoy is an open source edge and service proxy designed for cloud-native applications.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00704 Published 2023-07-25 Fixed in 1.26.4, 1.25.9 +2 CWE-20

TI-2023-18004 CVE-2023-35943

HIGH 66

Envoy is an open source edge and service proxy designed for cloud-native applications.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00661 Published 2023-07-25 Fixed in 1.26.4, 1.25.9 +2 CWE-416

TI-2023-18003 CVE-2023-35942

MEDIUM 62

Envoy is an open source edge and service proxy designed for cloud-native applications.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00887 Published 2023-07-25 Fixed in 1.26.4, 1.25.9 +2 CWE-416