Skip to content
OpenAdvisories
Unscored RHSA-2020:0734 4 CVEs

Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.9 servicemesh-proxy security update

Published Sep 16, 2024 · Updated Oct 3, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Service Mesh 1 service_mesh:1.0::el8 servicemesh-proxy 0:1.0.9-2.el8

Vulnerabilities 4

  • Unscored —
    CVE-2020-8659

    CNCF Envoy through 1.13.0 may consume excessive amounts of memory when proxying HTTP/1.1 requests or responses with man…

  • Unscored —
    CVE-2020-8660

    CNCF Envoy through 1.13.0 TLS inspector bypass. TLS inspector could have been bypassed (not recognized as a TLS client)…

  • Unscored —
    CVE-2020-8661

    CNCF Envoy through 1.13.0 may consume excessive amounts of memory when responding internally to pipelined requests.

  • Unscored —
    CVE-2020-8664

    CNCF Envoy through 1.13.0 has incorrect Access Control when using SDS with Combined Validation Context. Using the same …

References

  • article
    https://access.redhat.com/security/updates/classification/#moderate
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1802539
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1802540
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1802542
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1802545
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_0734.json
  • report
    https://access.redhat.com/security/cve/CVE-2020-8659
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-8659
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-8659
  • article
    https://github.com/envoyproxy/envoy/security/advisories/GHSA-jwcm-4pwp-c2qv
  • report
    https://access.redhat.com/security/cve/CVE-2020-8660
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-8660
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-8660
  • article
    https://github.com/envoyproxy/envoy/security/advisories/GHSA-c4g8-7grc-5wvx
  • report
    https://access.redhat.com/security/cve/CVE-2020-8661
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-8661
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-8661
  • article
    https://github.com/envoyproxy/envoy/security/advisories/GHSA-36cq-ww7h-p4j7
  • report
    https://access.redhat.com/security/cve/CVE-2020-8664
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2020-8664
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2020-8664
  • article
    https://github.com/envoyproxy/envoy/security/advisories/GHSA-3x9m-pgmg-xpx8