servicemesh vulnerabilities (Red Hat)
57 vulnerabilities.
-
servicemeshRed Hat Inefficient Regular Expression Complexity in moment 7.5 High -
servicemeshRed Hat Ill-formed headers may lead to unexpected behavior in Istio 7.0 High -
servicemeshRed Hat Trivial authentication bypass in Envoy 10.0 Critical -
servicemeshRed Hat Reachable assertion in Envoy 7.5 High -
servicemeshRed Hat Zip bomb vulnerability in Envoy 7.5 High -
servicemeshRed Hat Segmentation fault leading to crash in Envoy 5.9 Medium -
servicemeshRed Hat Session tickets lack random ticket_age_add in crypto/tls 3.1 Low -
servicemeshRed Hat golang.org/x/sys/unix has Incorrect privilege reporting in syscall 5.3 Medium -
servicemeshRed Hat The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows... 7.5 High -
servicemeshRed Hat encoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large... 7.5 High -
servicemeshRed Hat Path Traversal in Moment.js 7.5 High -
servicemeshRed Hat Unauthenticated control plane denial of service attack in Istio 7.5 High -
servicemeshRed Hat regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply... 7.5 High -
servicemeshRed Hat Crash when tunneling TCP over HTTP in Envoy 7.5 High -
servicemeshRed Hat Use-after-free in Envoy 6.1 Medium -
servicemeshRed Hat Incorrect handling of internal redirects results in crash in Envoy 7.5 High -
servicemeshRed Hat Incorrect configuration handling allows TLS session re-use without re-validation in Envoy 7.4 High -
servicemeshRed Hat Crash when a cluster is deleted in Envoy 4.4 Medium -
servicemeshRed Hat Null pointer dereference in envoy 7.5 High -
servicemeshRed Hat Unauthenticated control plane denial of service attack in Istio 7.5 High -
servicemeshRed Hat cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely... 7.5 High -
servicemeshRed Hat Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can... 7.5 High -
servicemeshRed Hat Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly... 9.1 Critical -
servicemeshRed Hat x/crypto/ssh vulnerable to panic via malformed packets 7.5 High -
servicemeshRed Hat Inefficient Regular Expression Complexity in axios/axios 7.5 High -
servicemeshRed Hat Fragments in Path May Lead to Authorization Policy Bypass 8.1 High -
servicemeshRed Hat Authorization Policy Bypass Due to Case Insensitive Host Comparison 8.3 High -
servicemeshRed Hat Continued processing of requests after locally generated response 8.6 High -
servicemeshRed Hat Incorrectly handling of URI '#fragment' element as part of the path element 8.6 High -
servicemeshRed Hat Excessive CPU utilization when closing HTTP/2 streams 5.8 Medium -
servicemeshRed Hat Incorrect concatenation of multiple value request headers in ext-authz extension 8.6 High -
servicemeshRed Hat Go before 1.15.15 and 1.16.x before 1.16.7 has a race condition that can lead to a net/http... 5.9 Medium -
servicemeshRed Hat Go before 1.17 does not properly consider extraneous zero characters at the beginning of an IP... 7.5 High -
servicemeshRed Hat Istio before 1.8.6 and 1.9.x before 1.9.5, when a gateway is using the AUTO_PASSTHROUGH routing... 9.8 Critical -
servicemeshRed Hat Bypass of path matching rules using escaped slash characters 8.1 High -
servicemeshRed Hat Istio Authorization Bypass Vulnerability 6.5 Medium -
servicemeshRed Hat Insufficient randomness in github.com/Masterminds/goutils 9.1 Critical -
servicemeshRed Hat denial of service in github.com/ulikunitz/xz 7.5 High -
servicemeshRed Hat Improper Input Validation in GoGo Protobuf 8.6 High -
servicemeshRed Hat In x/text in Go 1.15.4, a "slice bounds out of range" panic occurs in language... 7.5 High -
servicemeshRed Hat In x/text in Go 1.15.4, an "index out of range" panic occurs in language.ParseAcceptLanguage... 7.5 High -
servicemeshRed Hat Authorization bypass in Istio 6.8 Medium -
servicemeshRed Hat Withdrawn Advisory: Infinite loop in xz 7.5 High -
servicemeshRed Hat Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as... 5.9 Medium -
servicemeshRed Hat Prototype Pollution in lodash 7.4 High -
servicemeshRed Hat golang.org/x/text Infinite loop 7.5 High -
servicemeshRed Hat gopkg.in/macaron.v1 Open Redirect vulnerability 6.1 Medium -
servicemeshRed Hat Potential XSS vulnerability in jQuery 6.9 Medium -
servicemeshRed Hat Improper Verification of Cryptographic Signature in golang.org/x/crypto 7.5 High -
servicemeshRed Hat An issue was discovered in Envoy 1.12.0. Upon receipt of a malformed HTTP request without a Host... 7.5 High - Show olderLoading…