(RHSA-2020:3425) Moderate: Red Hat OpenShift Service Mesh 1.1 security update

2020-08-1120:44:28

access.redhat.com

CVSS2

4.9

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

CVSS3

6.8

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS

0.001

Percentile

34.4%

JSON

Red Hat OpenShift Service Mesh is Red Hat’s distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation.

Security Fix(es):

istio: incorrect translation of DENY policy for TCP service (CVE-2020-16844)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8x86_64servicemesh-pilot-agent< 1.1.7-1.el8servicemesh-pilot-agent-1.1.7-1.el8.x86_64.rpm
RedHat8x86_64servicemesh-mixc< 1.1.7-1.el8servicemesh-mixc-1.1.7-1.el8.x86_64.rpm
RedHat8x86_64servicemesh-galley< 1.1.7-1.el8servicemesh-galley-1.1.7-1.el8.x86_64.rpm
RedHat8x86_64servicemesh-pilot-discovery< 1.1.7-1.el8servicemesh-pilot-discovery-1.1.7-1.el8.x86_64.rpm
RedHat8x86_64servicemesh-mixs< 1.1.7-1.el8servicemesh-mixs-1.1.7-1.el8.x86_64.rpm
RedHat8x86_64servicemesh-sidecar-injector< 1.1.7-1.el8servicemesh-sidecar-injector-1.1.7-1.el8.x86_64.rpm
RedHat8x86_64servicemesh-istioctl< 1.1.7-1.el8servicemesh-istioctl-1.1.7-1.el8.x86_64.rpm
RedHat8x86_64servicemesh< 1.1.7-1.el8servicemesh-1.1.7-1.el8.x86_64.rpm
RedHat8x86_64servicemesh-citadel< 1.1.7-1.el8servicemesh-citadel-1.1.7-1.el8.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	8	x86_64	servicemesh-pilot-agent	< 1.1.7-1.el8	servicemesh-pilot-agent-1.1.7-1.el8.x86_64.rpm
RedHat	8	x86_64	servicemesh-mixc	< 1.1.7-1.el8	servicemesh-mixc-1.1.7-1.el8.x86_64.rpm
RedHat	8	x86_64	servicemesh-galley	< 1.1.7-1.el8	servicemesh-galley-1.1.7-1.el8.x86_64.rpm
RedHat	8	x86_64	servicemesh-pilot-discovery	< 1.1.7-1.el8	servicemesh-pilot-discovery-1.1.7-1.el8.x86_64.rpm
RedHat	8	x86_64	servicemesh-mixs	< 1.1.7-1.el8	servicemesh-mixs-1.1.7-1.el8.x86_64.rpm
RedHat	8	x86_64	servicemesh-sidecar-injector	< 1.1.7-1.el8	servicemesh-sidecar-injector-1.1.7-1.el8.x86_64.rpm
RedHat	8	x86_64	servicemesh-istioctl	< 1.1.7-1.el8	servicemesh-istioctl-1.1.7-1.el8.x86_64.rpm
RedHat	8	x86_64	servicemesh	< 1.1.7-1.el8	servicemesh-1.1.7-1.el8.x86_64.rpm
RedHat	8	x86_64	servicemesh-citadel	< 1.1.7-1.el8	servicemesh-citadel-1.1.7-1.el8.x86_64.rpm