Lucene search

K
redhatRedHatRHSA-2023:6239
HistoryNov 01, 2023 - 1:07 p.m.

(RHSA-2023:6239) Important: Kiali (Kiali 1.65.10) security update

2023-11-0113:07:47
access.redhat.com
16
red hat
openshift
service mesh
istio
http/2
ddos
cve-2023-44487

7.4 High

AI Score

Confidence

Low

0.72 High

EPSS

Percentile

98.0%

Red Hat OpenShift Service Mesh is Red Hat’s distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation.

Security Fix(es):

  • HTTP/2: Multiple HTTP/2 enabled web servers are vulnerable to a DDoS attack (Rapid Reset Attack) (CVE-2023-44487)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.