Red Hat Security Advisory

RHSA-2023:4625

Red Hat OpenShift Service Mesh Containers for 2.4.2 security update

Released 2023-08-11 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2023-18002 CVE-2023-35941

HIGH 75

Envoy is an open source edge and service proxy designed for cloud-native applications.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00814 Published 2023-07-25 Fixed in 1.26.4, 1.25.9 +2 CWE-116

TI-2023-18006 CVE-2023-35945

HIGH 72

Envoy is a cloud-native high-performance edge/middle/service proxy.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01652 Published 2023-07-13 Fixed in 1.26.3, 1.25.8 +2 CWE-400

TI-2023-18005 CVE-2023-35944

HIGH 71

Envoy is an open source edge and service proxy designed for cloud-native applications.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00704 Published 2023-07-25 Fixed in 1.26.4, 1.25.9 +2 CWE-20

TI-2023-18004 CVE-2023-35943

HIGH 66

Envoy is an open source edge and service proxy designed for cloud-native applications.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00661 Published 2023-07-25 Fixed in 1.26.4, 1.25.9 +2 CWE-416