Skip to content
OpenAdvisories
High RHSA-2022:1275 8 CVEs

Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.1.2 security update

Published Sep 16, 2024 · Updated Mar 27, 2026

Ecosystem: Red Hat

Fixed packages 8

ReleasePackageFixed in
Red Hat · Service Mesh 2 service_mesh:2.1::el8 servicemesh 0:2.1.2-4.el8
Red Hat · Service Mesh 2 service_mesh:2.1::el8 servicemesh-cni 0:2.1.2-4.el8
Red Hat · Service Mesh 2 service_mesh:2.1::el8 servicemesh-pilot-agent 0:2.1.2-4.el8
Red Hat · Service Mesh 2 service_mesh:2.1::el8 servicemesh-pilot-discovery 0:2.1.2-4.el8
Red Hat · Service Mesh 2 service_mesh:2.1::el8 servicemesh-proxy 0:2.1.2-4.el8
Red Hat · Service Mesh 2 service_mesh:2.1::el8 servicemesh-proxy-debuginfo 0:2.1.2-4.el8
Red Hat · Service Mesh 2 service_mesh:2.1::el8 servicemesh-proxy-debugsource 0:2.1.2-4.el8
Red Hat · Service Mesh 2 service_mesh:2.1::el8 servicemesh-proxy-wasm 0:2.1.2-4.el8

Vulnerabilities 8

  • High 7.5
    CVE-2021-43824

    Null pointer dereference in envoy

    Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions a crafted request crashes Envoy when a CONNECT request is sent to JWT filter configured with regex match. This provides a denial of service attack vec…

    envoyproxy envoy
  • High 7.5
    CVE-2021-43826

    Crash when tunneling TCP over HTTP in Envoy

    Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions of Envoy a crash occurs when configured for :ref:`upstream tunneling <envoy_v3_api_field_extensions.filters.network.tcp_proxy.v3.TcpProxy.tunneling_co…

    envoyproxy envoy
  • High 7.5
    CVE-2022-21655

    Incorrect handling of internal redirects results in crash in Envoy

    Envoy is an open source edge and service proxy, designed for cloud-native applications. The envoy common router will segfault if an internal redirect selects a route configured with direct response or redirect actions. This will result in a denial of service.…

    envoyproxy envoy
  • High 7.5
    CVE-2022-23635

    Unauthenticated control plane denial of service attack in Istio

    Istio is an open platform to connect, manage, and secure microservices. In affected versions the Istio control plane, `istiod`, is vulnerable to a request processing error, allowing a malicious attacker that sends a specially crafted message which results in …

    istio istio istio.io/istio Go
  • High 7.5
    CVE-2022-24726

    Unauthenticated control plane denial of service attack in Istio

    Istio is an open platform to connect, manage, and secure microservices. In affected versions the Istio control plane, istiod, is vulnerable to a request processing error, allowing a malicious attacker that sends a specially crafted message which results in th…

    istio istio
  • High 7.4
    CVE-2022-21654

    Incorrect configuration handling allows TLS session re-use without re-validation in Envoy

    Envoy is an open source edge and service proxy, designed for cloud-native applications. Envoy's tls allows re-use when some cert validation settings have changed from their default configuration. The only workaround for this issue is to ensure that default tl…

    envoyproxy envoy
  • Medium 6.1
    CVE-2021-43825

    Use-after-free in Envoy

    Envoy is an open source edge and service proxy, designed for cloud-native applications. Sending a locally generated response must stop further processing of request or response data. Envoy tracks the amount of buffered request and response data and aborts the…

    envoyproxy envoy
  • Medium 4.4
    CVE-2022-23606

    Crash when a cluster is deleted in Envoy

    Envoy is an open source edge and service proxy, designed for cloud-native applications. When a cluster is deleted via Cluster Discovery Service (CDS) all idle connections established to endpoints in that cluster are disconnected. A recursion was introduced in…

    envoyproxy envoy

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2050744
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2050746
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2050748
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2050753
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2050757
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2050758
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2057277
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2061638
  • article
    https://issues.redhat.com/browse/OSSM-1074
  • article
    https://issues.redhat.com/browse/OSSM-1234
  • article
    https://issues.redhat.com/browse/OSSM-303
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_1275.json
  • report
    https://access.redhat.com/security/cve/CVE-2021-43824
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-43824
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-43824
  • article
    https://github.com/envoyproxy/envoy/security/advisories/GHSA-vj5m-rch8-5r2p
  • report
    https://access.redhat.com/security/cve/CVE-2021-43825
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-43825
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-43825
  • article
    https://github.com/envoyproxy/envoy/security/advisories/GHSA-h69p-g6xg-mhhh
  • report
    https://access.redhat.com/security/cve/CVE-2021-43826
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2021-43826
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2021-43826
  • article
    https://github.com/envoyproxy/envoy/security/advisories/GHSA-cmx3-fvgf-83mf
  • report
    https://access.redhat.com/security/cve/CVE-2022-21654
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-21654
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-21654
  • article
    https://github.com/envoyproxy/envoy/security/advisories/GHSA-5j4x-g36v-m283
  • report
    https://access.redhat.com/security/cve/CVE-2022-21655
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-21655
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-21655
  • article
    https://github.com/envoyproxy/envoy/security/advisories/GHSA-7r5p-7fmh-jxpg
  • report
    https://access.redhat.com/security/cve/CVE-2022-23606
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-23606
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-23606
  • article
    https://github.com/envoyproxy/envoy/security/advisories/GHSA-9vp2-4cp7-vvxf
  • report
    https://access.redhat.com/security/cve/CVE-2022-23635
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-23635