EUVD-2022-0899

Malicious code in bioql PyPI...

Authorization bypass in Istio

In Istio 1.5.0 though 1.5.8 and Istio 1.6.0 through 1.6.7, when users specify an AuthorizationPolicy resource with DENY actions using wildcard suffixes e.g. -some-suffix for source principals or namespace fields, callers will never be denied access, bypassing the intended policy...

PT-2020-5948

Name of the Vulnerable Software and Affected Versions: Istio versions 1.5.0 through 1.5.8 Istio versions 1.6.0 through 1.6.7 Description: The issue is related to insufficient access control in the Istio network software. It may allow a remote attacker to impact the confidentiality and integrity o...

ipfw -- IP fragment denial of service

Problem description: The firewall maintains a pointer to layer 4 header information in the event that it needs to send a TCP reset or ICMP error message to discard packets. Due to incorrect handling of IP fragments, this pointer fails to get initialized. Impact: An attacker can cause the firewall...