servicemesh-operator vulnerabilities (Red Hat)
36 vulnerabilities.
-
servicemesh-operatorRed Hat A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do... 9.8 Critical -
servicemesh-operatorRed Hat Inefficient Regular Expression Complexity in moment 7.5 High -
servicemesh-operatorRed Hat Ill-formed headers may lead to unexpected behavior in Istio 7.0 High -
servicemesh-operatorRed Hat Trivial authentication bypass in Envoy 10.0 Critical -
servicemesh-operatorRed Hat Reachable assertion in Envoy 7.5 High -
servicemesh-operatorRed Hat Zip bomb vulnerability in Envoy 7.5 High -
servicemesh-operatorRed Hat Segmentation fault leading to crash in Envoy 5.9 Medium -
servicemesh-operatorRed Hat Session tickets lack random ticket_age_add in crypto/tls 3.1 Low -
servicemesh-operatorRed Hat golang.org/x/sys/unix has Incorrect privilege reporting in syscall 5.3 Medium -
servicemesh-operatorRed Hat The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows... 7.5 High -
servicemesh-operatorRed Hat encoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large... 7.5 High -
servicemesh-operatorRed Hat Path Traversal in Moment.js 7.5 High -
servicemesh-operatorRed Hat regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply... 7.5 High -
servicemesh-operatorRed Hat cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely... 7.5 High -
servicemesh-operatorRed Hat Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can... 7.5 High -
servicemesh-operatorRed Hat Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly... 9.1 Critical -
servicemesh-operatorRed Hat Excessive CPU utilization when closing HTTP/2 streams 5.8 Medium -
servicemesh-operatorRed Hat Bypass of path matching rules using escaped slash characters 8.1 High -
servicemesh-operatorRed Hat Istio Authorization Bypass Vulnerability 6.5 Medium -
servicemesh-operatorRed Hat Insufficient randomness in github.com/Masterminds/goutils 9.1 Critical -
servicemesh-operatorRed Hat Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 servicemesh-operator security update 8.8 High -
servicemesh-operatorRed Hat Withdrawn Advisory: Infinite loop in xz 7.5 High -
servicemesh-operatorRed Hat Go before 1.13.13 and 1.14.x before 1.14.5 has a data race in some net/http servers, as... 5.9 Medium -
servicemesh-operatorRed Hat Prototype Pollution in lodash 7.4 High -
servicemesh-operatorRed Hat golang.org/x/text Infinite loop 7.5 High -
servicemesh-operatorRed Hat gopkg.in/macaron.v1 Open Redirect vulnerability 6.1 Medium -
servicemesh-operatorRed Hat Potential XSS vulnerability in jQuery 6.9 Medium -
servicemesh-operatorRed Hat Improper Verification of Cryptographic Signature in golang.org/x/crypto 7.5 High -
servicemesh-operatorRed Hat An issue was discovered in Envoy 1.12.0. Upon receipt of a malformed HTTP request without a Host... 7.5 High -
servicemesh-operatorRed Hat An issue was discovered in Envoy 1.12.0. An untrusted remote client may send an HTTP header (such... 9.8 Critical -
servicemesh-operatorRed Hat An issue was discovered in Envoy 1.12.0. An untrusted remote client may send HTTP/2 requests that... 9.8 Critical -
servicemesh-operatorRed Hat Kubernetes API Server JSON/YAML parsing vulnerable to resource exhaustion attack 7.5 High -
servicemesh-operatorRed Hat In Envoy through 1.11.1, users may configure a route to match incoming path headers via the... 7.5 High -
servicemesh-operatorRed Hat Istio ReDoS Vulnerability 7.5 High -
servicemesh-operatorRed Hat Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service 7.5 High -
servicemesh-operatorRed Hat Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service 7.5 High