servicemesh-proxy-wasm vulnerabilities (Red Hat)
24 vulnerabilities.
-
servicemesh-proxy-wasmRed Hat Inefficient Regular Expression Complexity in moment 7.5 High -
servicemesh-proxy-wasmRed Hat Ill-formed headers may lead to unexpected behavior in Istio 7.0 High -
servicemesh-proxy-wasmRed Hat Trivial authentication bypass in Envoy 10.0 Critical -
servicemesh-proxy-wasmRed Hat Reachable assertion in Envoy 7.5 High -
servicemesh-proxy-wasmRed Hat Zip bomb vulnerability in Envoy 7.5 High -
servicemesh-proxy-wasmRed Hat Segmentation fault leading to crash in Envoy 5.9 Medium -
servicemesh-proxy-wasmRed Hat Session tickets lack random ticket_age_add in crypto/tls 3.1 Low -
servicemesh-proxy-wasmRed Hat golang.org/x/sys/unix has Incorrect privilege reporting in syscall 5.3 Medium -
servicemesh-proxy-wasmRed Hat The generic P-256 feature in crypto/elliptic in Go before 1.17.9 and 1.18.x before 1.18.1 allows... 7.5 High -
servicemesh-proxy-wasmRed Hat encoding/pem in Go before 1.17.9 and 1.8.x before 1.8.1 has a Decode stack overflow via a large... 7.5 High -
servicemesh-proxy-wasmRed Hat Path Traversal in Moment.js 7.5 High -
servicemesh-proxy-wasmRed Hat Unauthenticated control plane denial of service attack in Istio 7.5 High -
servicemesh-proxy-wasmRed Hat regexp.Compile in Go before 1.16.15 and 1.17.x before 1.17.8 allows stack exhaustion via a deeply... 7.5 High -
servicemesh-proxy-wasmRed Hat Crash when tunneling TCP over HTTP in Envoy 7.5 High -
servicemesh-proxy-wasmRed Hat Use-after-free in Envoy 6.1 Medium -
servicemesh-proxy-wasmRed Hat Incorrect handling of internal redirects results in crash in Envoy 7.5 High -
servicemesh-proxy-wasmRed Hat Incorrect configuration handling allows TLS session re-use without re-validation in Envoy 7.4 High -
servicemesh-proxy-wasmRed Hat Crash when a cluster is deleted in Envoy 4.4 Medium -
servicemesh-proxy-wasmRed Hat Null pointer dereference in envoy 7.5 High -
servicemesh-proxy-wasmRed Hat Unauthenticated control plane denial of service attack in Istio 7.5 High -
servicemesh-proxy-wasmRed Hat cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely... 7.5 High -
servicemesh-proxy-wasmRed Hat Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can... 7.5 High -
servicemesh-proxy-wasmRed Hat Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly... 9.1 Critical -
servicemesh-proxy-wasmRed Hat Excessive CPU utilization when closing HTTP/2 streams 5.8 Medium