CVE-2019-12995

Istio before 1.2.2 mishandles certain access tokens, leading to "Epoch 0 terminated with an error" in Envoy. This is related to a jwtauthenticator.cc segmentation fault...

CVE-2019-12995

CVE-2019-12995 affects Istio prior to 1.2.2. The issue arises when processing certain access tokens, causing a segmentation fault in jwt_authenticator.cc within Envoy and resulting in the message “Epoch 0 terminated with an error.” Public details consistently describe the root cause as mishandlin...