Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
OpenShift Service Mesh 2/servicemesh-proxy
Red Hat
· Package
13 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
envoy: Excessive CPU usage when URI template matcher is configured using regex
CVE-2024-23323
OpenShift Service Mesh 2/openshift-service-mesh/proxyv2-rhel8
OpenShift Service Mesh 2/servicemesh-proxy
Red Hat
Medium
No fix reported
Not recorded
envoy: Envoy crashes when idle and request per try timeout occur within the backoff interval
CVE-2024-23322
OpenShift Service Mesh 2/openshift-service-mesh/proxyv2-rhel8
OpenShift Service Mesh 2/servicemesh-proxy
Red Hat
Medium
No fix reported
Not recorded
envoy: Ext auth can be bypassed when Proxy protocol filter sets invalid UTF-8 metadata
CVE-2024-23324
OpenShift Service Mesh 2/openshift-service-mesh/proxyv2-rhel8
OpenShift Service Mesh 2/servicemesh-proxy
Red Hat
High
No fix reported
Not recorded
envoy: Crash in proxy protocol when command type of LOCAL
CVE-2024-23327
OpenShift Service Mesh 2/openshift-service-mesh/proxyv2-rhel8
OpenShift Service Mesh 2/servicemesh-proxy
Red Hat
High
No fix reported
Not recorded
envoy: Envoy crashes when using an address type that isn’t supported by the OS
CVE-2024-23325
OpenShift Service Mesh 2/openshift-service-mesh/proxyv2-rhel8
OpenShift Service Mesh 2/servicemesh-proxy
Red Hat
Medium
No fix reported
Not recorded
envoy: abnormal termination when using auto_sni with authority header longer than 255 characters
CVE-2024-32475
OpenShift Service Mesh 2/servicemesh-proxy
Red Hat
High
No fix reported
Not recorded
envoy: memory DoS in ext_proc and ext_authz
CVE-2024-34364
OpenShift Service Mesh 2/openshift-service-mesh/proxyv2-rhel8
OpenShift Service Mesh 2/servicemesh-proxy
Red Hat
Medium
No fix reported
Not recorded
envoy: different QUIC stack DoS
CVE-2024-32975
OpenShift Service Mesh 2/openshift-service-mesh/proxyv2-rhel8
OpenShift Service Mesh 2/servicemesh-proxy
Red Hat
Medium
No fix reported
Not recorded
envoy: another QUIC stack DoS
CVE-2024-32974
OpenShift Service Mesh 2/openshift-service-mesh/proxyv2-rhel8
OpenShift Service Mesh 2/servicemesh-proxy
Red Hat
Medium
No fix reported
Not recorded
envoy: QUIC stack DoS
CVE-2024-34362
OpenShift Service Mesh 2/openshift-service-mesh/proxyv2-rhel8
OpenShift Service Mesh 2/servicemesh-proxy
Red Hat
Medium
No fix reported
Not recorded
envoy: Brotli decompressor infinite loop
CVE-2024-32976
OpenShift Service Mesh 2/servicemesh-proxy
Red Hat
High
No fix reported
Not recorded
envoy: access log JSON formatter DoS
CVE-2024-34363
OpenShift Service Mesh 2/openshift-service-mesh/proxyv2-rhel8
OpenShift Service Mesh 2/servicemesh-proxy
Red Hat
High
No fix reported
Not recorded
envoy: Envoy incorrectly accepts HTTP 200 response for entering upgrade mode
CVE-2024-23326
OpenShift Service Mesh 2/servicemesh-proxy
Red Hat
Medium
No fix reported
Not recorded
