778 matches found
Out-of-bounds Read
Istio is an open platform to connect, manage, and secure microservices. In affected versions ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access resulting in undefined behavior or crashing. Users are most likely at risk if they have an Istio ingress...
CVE-2022-31045
Istio is an open platform to connect, manage, and secure microservices. In affected versions ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access resulting in undefined behavior or crashing. Users are most likely at risk if they have an Istio ingress...
CVE-2022-31045 vulnerabilities
Vulnerabilities for packages: istio-pilot-discovery, istio-pilot-agent, istio-cni, istio-operator...
Design/Logic Flaw
Istio is an open platform to connect, manage, and secure microservices. In affected versions ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access resulting in undefined behavior or crashing. Users are most likely at risk if they have an Istio ingress...
CVE-2022-31045
CVE-2022-31045 affects Istio setups where ill-formed headers sent to Envoy in specific configurations can trigger undefined behavior or crashes, with risk tied to ingress gateways exposed to external traffic. Public details in connected docs indicate remediation through Istio upgrades to address ...
CVE-2022-31045 Ill-formed headers may lead to unexpected behavior in Istio
Istio is an open platform to connect, manage, and secure microservices. In affected versions ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access resulting in undefined behavior or crashing. Users are most likely at risk if they have an Istio ingress...
CVE-2022-31045 Ill-formed headers may lead to unexpected behavior in Istio
Istio is an open platform to connect, manage, and secure microservices. In affected versions ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access resulting in undefined behavior or crashing. Users are most likely at risk if they have an Istio ingress...
CVE-2022-31045 Ill-formed headers may lead to unexpected behavior in Istio
Istio is an open platform to connect, manage, and secure microservices. In affected versions ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access resulting in undefined behavior or crashing. Users are most likely at risk if they have an Istio ingress...
Istio 缓冲区错误漏洞
Istio is a set of open platforms for connecting, managing, and securing microservices. Istio suffers from a buffer error vulnerability, which stems from the fact that an incorrectly formatted header sent to the Envoy in certain configurations may cause an unexpected memory access that could crash...
GHSA-VC7H-CMP3-4HW5 Istio vulnerable to denial of service
Istio 1.3.x before 1.3.5 is vulnerable to denial of service because continueonlistenerfilterstimeout is set to True, a related issue to CVE-2019-18836...
Istio vulnerable to denial of service
Istio 1.3.x before 1.3.5 is vulnerable to denial of service because continueonlistenerfilterstimeout is set to True, a related issue to CVE-2019-18836...
Istio Authorization Bypass Vulnerability
Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request path with multiple slashes or escaped slash characters %2F or %5C could potentially bypass an Istio authorization policy when path based authorization rules are used...
GHSA-6Q5M-22MQ-Q2XV Istio Authorization Bypass Vulnerability
Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request path with multiple slashes or escaped slash characters %2F or %5C could potentially bypass an Istio authorization policy when path based authorization rules are used...
GHSA-QCVW-82HH-GQ38 Istio ReDoS Vulnerability
Istio before 1.1.13 and 1.2.x before 1.2.4 mishandles regular expressions for long URIs, leading to a denial of service during use of the JWT, VirtualService, HTTPAPISpecBinding, or QuotaSpecBinding API...
GHSA-QCVW-82HH-GQ38 vulnerabilities
Vulnerabilities for packages: istio-pilot-discovery, istio-pilot-agent, istio-cni, istio-operator...
Istio ReDoS Vulnerability
Istio before 1.1.13 and 1.2.x before 1.2.4 mishandles regular expressions for long URIs, leading to a denial of service during use of the JWT, VirtualService, HTTPAPISpecBinding, or QuotaSpecBinding API...
Oracle Linux 7 / 8 : olcne / istio / istio (ELSA-2022-9362)
The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9362 advisory. - Addresses CVE-2022-24726, CVE-2022-24921 istio Tenable has extracted the preceding description block directly from the Oracle Linux security...
Oracle Linux 7 / 8 : olcne / istio / istio (ELSA-2022-9363)
The remote Oracle Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-9363 advisory. - Addresses CVE-2022-24726, CVE-2022-24921 istio Tenable has extracted the preceding description block directly from the Oracle Linux security...
olcne istio istio security update
olcne 1.3.5-1 - Update Istio to 1.12.6prometheus-2.30.1, grafana-7.5.15 istio 1.12.6-1 - Addresses CVE-2022-24726, CVE-2022-24921 istio 1.11.4-1 - Added Oracle specific files for 1.11.4-1...