Skip to content
OpenAdvisories
Unscored RHSA-2021:1324 3 CVEs

Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.0.3 security update

Published Sep 16, 2024 · Updated Mar 18, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Service Mesh 2 service_mesh:2.0::el8 servicemesh-proxy 0:2.0.3-1.el8

Vulnerabilities 3

  • Unscored —
    CVE-2021-28682

    An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable integer overflow in which a very large…

  • Unscored —
    CVE-2021-28683

    An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference and crash in …

  • Unscored —
    CVE-2021-29258

    An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because an empty MET…

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1942263
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1942272
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1942280
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_1324.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-28682
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-28682
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-28682
  • article
    https://istio.io/latest/news/security/istio-security-2021-003/
  • report
    https://access.redhat.com/security/cve/CVE-2021-28683
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-28683
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-28683
  • report
    https://access.redhat.com/security/cve/CVE-2021-29258
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-29258
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-29258
  • article
    https://github.com/envoyproxy/envoy/blob/main/source/docs/h2_metadata.md