istioctl vulnerabilities (openSUSE)
36 vulnerabilities.
-
istioctlopenSUSE Distrust compromised intermediate certificates in crypto/x509 6.8 Medium -
istioctlopenSUSE Envoy: RBAC Authorization Bypass via Path Parameters 7.5 High -
istioctlopenSUSE Envoy: HTTP RBAC safe_regex can fail open on RFC-valid obs-text header values 7.5 High -
istioctlopenSUSE Envoy: Path normalization does not handle dot and dotdot segments with parameters 5.3 Medium -
istioctlopenSUSE Envoy: HTTP/2 Discarded Host Header 200 GB Header-Copy OOM in Envoy 7.5 High -
istioctlopenSUSE Envoy - Incomplete fix for CVE-2026-26310: copyInternetAddressAndPort crashes on scoped IPv6 addresses in ORIGINAL_DST clusters 5.3 Medium -
istioctlopenSUSE Envoy: Cross-user response poisoning via a generic (non-WebSocket) HTTP upgrade on Envoy's shared backend pool 7.5 High -
istioctlopenSUSE Envoy ext_authz: request `:path` pseudoheader dereferenced w/o null check 7.5 High -
istioctlopenSUSE Envoy: Stored XSS in Admin Stats Interface (/stats?format=html) 7.4 High -
istioctlopenSUSE Envoy: oghttp2 upstream trailers incorrect handling 7.5 High -
istioctlopenSUSE Envoy: use-after-free in QUIC on internal redirects 7.5 High -
istioctlopenSUSE Envoy: Potential path-matching/authentication bypass when using Envoy in combination with a backend stripping per-segment path (matrix) parameters (e.g. Apache Tomcat) 5.3 Medium -
istioctlopenSUSE Envoy: ext_authz - RawHttpClientImpl onSuccess 0x0 segfault 5.9 Medium -
istioctlopenSUSE Envoy: HTTP/3 connection pool selection null-derefs in ProdClusterManagerFactory::allocateConnPool when transport_socket_options is null 5.9 Medium -
istioctlopenSUSE Envoy HTTP: OAuth2 filter late async token completion after stream teardown (UAF / crash risk) 5.9 Medium -
istioctlopenSUSE Envoy: Segmentation fault when using %REQUESTED_SERVER_NAME% in log format 7.5 High -
istioctlopenSUSE Envoy: ext_authz Use-After-Free during Stream Teardown with Per-Route Overrides 5.9 Medium -
istioctlopenSUSE Envoy: PROXY Protocol v2 header generator emits "skipped" TLVs, causing 65 KB attacker-controlled spillover into the upstream application stream 4.8 Medium -
istioctlopenSUSE Envoy crashes if multiple unexpected ext_proc responses are packed into one gRPC message 6.5 Medium -
istioctlopenSUSE Envoy Heap Buffer Overflow in TcpStatsdSink 5.9 Medium -
istioctlopenSUSE Envoy: grpc_stats filter segfault on Connect protocol requests to direct_response routes 6.5 Medium -
istioctlopenSUSE Envoy: Null pointer deref in internal redirects 5.9 Medium -
istioctlopenSUSE Envoy: HTTP/3 to HTTP/1 request smuggling via headers-only request with nonzero Content-Length 7.5 High -
istioctlopenSUSE Envoy: Abnormal process termination in DNS UDP filter 5.9 Medium -
istioctlopenSUSE Envoy Zstd Decompressor: Ratio Check at Wrong Loop Depth lead to memory explosion 7.5 High -
istioctlopenSUSE Envoy: Stack overflow in destructor of highly nested JSON 7.5 High -
istioctlopenSUSE Envoy: Embedded NUL in TLS DNS SAN Truncation in the Default TLS Certificate Validator. (Auth Bypass) 4.4 Medium -
istioctlopenSUSE Envoy OAuth2 Filter: Padding Oracle via AES-256-CBC Cookie Decryption 6.8 Medium -
istioctlopenSUSE Potential code smuggling via doc comments in cmd/cgo 8.6 High -
istioctlopenSUSE Unexpected session resumption in crypto/tls 10.0 Critical -
istioctlopenSUSE c-ares has a Use After Free vulnerability when connection is cleaned up after error 5.9 Medium -
istioctlopenSUSE Envoy Lua filter use-after-free when oversized rewritten response body causes crash 6.5 Medium -
istioctlopenSUSE Envoy allows large requests and responses to cause TCP connection pool crash 6.6 Medium -
istioctlopenSUSE Envoy crashes when HTTP ext_proc processes local replies 6.5 Medium -
istioctlopenSUSE Denial of service due to improper 100-continue handling in net/http 7.5 High -
istioctlopenSUSE Envoy Proxy use after free when route hash policy is configured with cookie attributes 6.5 Medium