Red Hat Security Advisory

RHSA-2023:5175

Red Hat OpenShift Service Mesh 2.2.10 security update

Released 2023-09-14 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2023-18002 CVE-2023-35941

HIGH 75

Envoy is an open source edge and service proxy designed for cloud-native applications.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00814 Published 2023-07-25 Fixed in 1.26.4, 1.25.9 +2 CWE-116

TI-2023-18006 CVE-2023-35945

HIGH 72

Envoy is a cloud-native high-performance edge/middle/service proxy.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01652 Published 2023-07-13 Fixed in 1.26.3, 1.25.8 +2 CWE-400

TI-2023-18005 CVE-2023-35944

HIGH 71

Envoy is an open source edge and service proxy designed for cloud-native applications.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00704 Published 2023-07-25 Fixed in 1.26.4, 1.25.9 +2 CWE-20