Skip to content
OpenAdvisories
High RHSA-2022:5003 2 CVEs

Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.0.10 security update

Published Sep 16, 2024 · Updated Mar 18, 2026

Ecosystem: Red Hat

Fixed packages 1

ReleasePackageFixed in
Red Hat · Service Mesh 2 service_mesh:2.0::el8 servicemesh-proxy 0:2.0.10-1.el8

Vulnerabilities 2

  • High 7.5
    CVE-2022-29225

    Zip bomb vulnerability in Envoy

    Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 secompressors accumulate decompressed data into an intermediate buffer before overwriting the body in the decode/encodeBody. This may allow an attacker to zip bomb the decompressor by…

    envoyproxy envoy
  • Medium 5.9
    CVE-2022-29224

    Segmentation fault leading to crash in Envoy

    Envoy is a cloud-native high-performance proxy. Versions of envoy prior to 1.22.1 are subject to a segmentation fault in the GrpcHealthCheckerImpl. Envoy can perform various types of upstream health checking. One of them uses gRPC. Envoy also has a feature wh…

    envoyproxy envoy

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2088737
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2088738
  • article
    https://issues.redhat.com/browse/OSSM-1613
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5003.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-29224
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-29224
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-29224
  • article
    https://github.com/envoyproxy/envoy/security/advisories/GHSA-m4j9-86g3-8f49
  • report
    https://access.redhat.com/security/cve/CVE-2022-29225
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-29225
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-29225
  • article
    https://github.com/envoyproxy/envoy/security/advisories/GHSA-75hv-2jjj-89hh