Skip to content
OpenAdvisories
Unscored RHSA-2021:1322 4 CVEs

Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.13 security update

Published Sep 16, 2024 · Updated Jun 27, 2026

Ecosystem: Red Hat

Fixed packages 3

ReleasePackageFixed in
Red Hat · Service Mesh 1 service_mesh:1.1::el8 servicemesh-pilot-agent 0:1.1.13-3.el8
Red Hat · Service Mesh 1 service_mesh:1.1::el8 servicemesh-pilot-discovery 0:1.1.13-3.el8
Red Hat · Service Mesh 1 service_mesh:1.1::el8 servicemesh-proxy 0:1.1.13-1.el8

Vulnerabilities 4

  • Unscored —
    CVE-2019-25014

    A NULL pointer dereference was found in pkg/proxy/envoy/v2/debug.go getResourceVersion in Istio pilot before 1.5.0-alph…

  • Unscored —
    CVE-2021-28682

    An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable integer overflow in which a very large…

  • Unscored —
    CVE-2021-28683

    An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference and crash in …

  • Unscored —
    CVE-2021-29258

    An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty MET…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1919066
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1942263
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1942272
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1942280
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1322.json
  • report
    https://access.redhat.com/security/cve/CVE-2019-25014
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2019-25014
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2019-25014
  • report
    https://access.redhat.com/security/cve/CVE-2021-28682
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-28682
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-28682
  • article
    https://istio.io/latest/news/security/istio-security-2021-003/
  • report
    https://access.redhat.com/security/cve/CVE-2021-28683
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-28683
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-28683
  • report
    https://access.redhat.com/security/cve/CVE-2021-29258
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-29258
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-29258
  • article
    https://github.com/envoyproxy/envoy/blob/main/source/docs/h2_metadata.md