Photon OS 1.0: Envoy PHSA-2019-1.0-0241

An update of the envoy package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0241. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid126478...

CVE-2019-12995

Istio before 1.2.2 mishandles certain access tokens, leading to "Epoch 0 terminated with an error" in Envoy. This is related to a jwtauthenticator.cc segmentation fault...

Design/Logic Flaw

Istio before 1.2.2 mishandles certain access tokens, leading to "Epoch 0 terminated with an error" in Envoy. This is related to a jwtauthenticator.cc segmentation fault...

CVE-2019-12995

Istio before 1.2.2 mishandles certain access tokens, leading to "Epoch 0 terminated with an error" in Envoy. This is related to a jwtauthenticator.cc segmentation fault...

CVE-2019-12995

Istio before 1.2.2 mishandles certain access tokens, leading to "Epoch 0 terminated with an error" in Envoy. This is related to a jwtauthenticator.cc segmentation fault...

CVE-2019-12995

CVE-2019-12995 affects Istio prior to 1.2.2. The issue arises when processing certain access tokens, causing a segmentation fault in jwt_authenticator.cc within Envoy and resulting in the message “Epoch 0 terminated with an error.” Public details consistently describe the root cause as mishandlin...

Improper Input Validation

Istio mishandles certain access tokens, leading to Epoch 0 terminated with an error in Envoy. This is related to a jwtauthenticator.cc segmentation fault...

PT-2019-13076

Name of the Vulnerable Software and Affected Versions Istio versions prior to 1.2.2 Description The issue is related to the mishandling of certain access tokens, which can lead to an error in Envoy, specifically "Epoch 0 terminated with an error". This is caused by a segmentation fault in the jwt...

CVE-2019-12995: NULL Pointer Dereference

Istio before 1.2.2 mishandles certain access tokens, leading to "Epoch 0 terminated with an error" in Envoy. This is related to a jwtauthenticator.cc segmentation fault...

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0241

An update of 'envoy' packages of Photon OS has been released...

Critical Photon OS Security Update - PHSA-2019-0241

Updates of 'envoy' packages of Photon OS have been released...

envoy/h1_capture_fuzz_test: Crash in Envoy::TestUtility::findCounter

Detailed report: https://oss-fuzz.com/testcase?key=5689202068422656 Project: envoy Fuzzer: libFuzzerenvoyh1capturefuzztest Fuzz target binary: h1capturefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7fdd36e0b970 Crash State:...

The vulnerability of the network software tool Envoy, related to errors in analyzing HTTP headers, allows a hacker to gain access to protected data.

The vulnerability of the network software tool Envoy is related to errors in analyzing HTTP headers. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected data without going through the authentication mechanism...

The vulnerability of the network software tool Envoy, related to errors in URI normalization, allows a intruder to gain unauthorized access to protected data.

The vulnerability of the network software tool Envoy is related to errors in normalizing URI addresses. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected data...

envoy/header_parser_fuzz_test: Crash in Envoy::Router::StreamInfoHeaderFormatter::StreamInfoHeaderFormatter

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5702537941876736 Project: envoy Fuzzer: libFuzzerenvoyheaderparserfuzztest Fuzz target binary: headerparserfuzztest Job Type: libfuzzerubsanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash...

envoy/h1_capture_direct_response_fuzz_test: Crash in Envoy::TestUtility::findCounter

Detailed report: https://oss-fuzz.com/testcase?key=5756178220449792 Project: envoy Fuzzer: libFuzzerenvoyh1capturedirectresponsefuzztest Fuzz target binary: h1capturedirectresponsefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x7f55425a59b0 Crash...

Unauthorised Access

Envoy is vulnerable to unauthorised access vulnerability. This occurs when parsing HTTP/1.x header values because envoy does not reject embedded zero characters NUL, ASCII 0x0. This allows remote attackers crafting header values containing embedded NUL characters to potentially bypass header...

Access Control Bypass

Envoy is vulnerable to access control bypass attacks. This is because it does not normalize HTTP URL paths. A remote attacker could craft a relative path and could interpret the non-normalized path, that provide an attacker to access beyond the scope provided by the access control policy...

envoy/header_map_impl_fuzz_test: Heap-buffer-overflow in Envoy::Http::HeaderString::setCopy

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5182326490791936 Project: envoy Fuzzer: libFuzzerenvoyheadermapimplfuzztest Fuzz target binary: headermapimplfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-buffer-overflo...

envoy/h1_capture_fuzz_test: Heap-use-after-free in Envoy::Http::Http1::ServerConnectionImpl::onMessageComplete

Project: https://github.com/envoyproxy/envoy.git Detailed report: https://oss-fuzz.com/testcase?key=5738507290542080 Project: envoy Fuzzer: libFuzzerenvoyh1capturefuzztest Fuzz target binary: h1capturefuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8...