Security
فارسی
All products

OpenShift Service Mesh 2.0/servicemesh-proxy

Red Hat · Package
12 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Panic during division of very large numbers in math/bigCVE-2020-28362 · GO-2021-0069 stdlibOpenShift Serverless/knative-serving GoRed Hat Medium Fix reported
Incorrect operations on the P-224 curve in crypto/ellipticCVE-2021-3114 · GO-2021-0235 stdlibOpenShift Serverless/knative-eventing GoRed Hat Medium Fix reported
Incorrect computation for some invalid field elements in crypto/ellipticCVE-2022-23806 · GO-2021-0319 stdlibLogging Subsystem for Red Hat OpenShift/openshift-logging/cluster-logging-rhel8-operator GoRed Hat Medium Fix reported
Panic due to large inputs affecting P-256 curves in crypto/ellipticCVE-2022-28327 · GO-2022-0435 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Stack overflow from a large amount of PEM data in encoding/pemCVE-2022-24675 · GO-2022-0433 stdlibMigration Toolkit for Containers/cpma GoRed Hat Medium Fix reported
Session tickets lack random ticket_age_add in crypto/tlsCVE-2022-30629 · GO-2022-0531 stdlibMigration Toolkit for Containers/cpma GoRed Hat Low Fix reported
envoy: mishandling dropped and truncated datagrams leads to segfault and DoSCVE-2020-35471 OpenShift Service Mesh 1/servicemesh-proxyOpenShift Service Mesh 2.0/servicemesh-proxy Red Hat High No fix reported
envoyproxy/envoy: excessive CPU usage when handling a large number of HTTP/2 requestsCVE-2021-32778 OpenShift Service Mesh 1/servicemesh-proxyOpenShift Service Mesh 2.0/servicemesh-proxy Red Hat High No fix reported
envoy: X.509 Extended Key Usage and Trust Purposes bypassCVE-2022-21657 OpenShift Service Mesh 2.0/servicemesh-proxyOpenShift Service Mesh 2.1/servicemesh-proxy Red Hat Medium No fix reported
envoy: X.509 subjectAltName matching (and nameConstraints) bypassCVE-2022-21656 OpenShift Service Mesh 2.0/servicemesh-proxyOpenShift Service Mesh 2.1/servicemesh-proxy Red Hat Medium No fix reported
envoy: Internal redirect crash for requests with body/trailersCVE-2022-29227 OpenShift Service Mesh 2.0/servicemesh-proxyOpenShift Service Mesh 2.1/servicemesh-proxy Red Hat High No fix reported
envoy: oauth filter calls continueDecoding() from within decodeHeaders()CVE-2022-29228 OpenShift Service Mesh 2.0/servicemesh-proxy Red Hat High No fix reported