Openshift Service Mesh Security Vulnerabilities and Issues — Openshift Service Mesh CVE List

Lucene search

RedhatOpenshift Service Mesh

2 matches found

CVE•added 2021/01/29 6:15 a.m.•84 views

CVE-2019-25014

A NULL pointer dereference was found in pkg/proxy/envoy/v2/debug.go getResourceVersion in Istio pilot before 1.5.0-alpha.0. If a particular HTTP GET request is made to the pilot API endpoint, it is possible to cause the Go runtime to panic (resulting in a denial of service to the istio-pilot applic...

6.5CVSS6.4AI score0.00207EPSS

CVE•added 2025/01/28 10:15 a.m.•49 views

CVE-2025-0752

A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6. Rate-limiter avoidance, access-control bypass, CPU and memory exhaustion, and replay attacks may be possible due to improper HTTP header sanitization in Envoy.

6.3CVSS7AI score0.0009EPSS