Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.1.3 security update

Fixed packages 11

Vulnerabilities 8

• Critical 10.0
  CVE-2022-29226

  Trivial authentication bypass in Envoy

  Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 the OAuth filter implementation does not include a mechanism for validating access tokens, so by design when the HMAC signed cookie is missing a full authentication flow should be tri…

  envoyproxy envoy
  Jun 9, 2022
• High 7.5
  CVE-2022-29225

  Zip bomb vulnerability in Envoy

  Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 secompressors accumulate decompressed data into an intermediate buffer before overwriting the body in the decode/encodeBody. This may allow an attacker to zip bomb the decompressor by…

  envoyproxy envoy
  Jun 9, 2022
• High 7.5
  CVE-2022-29228

  Reachable assertion in Envoy

  Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 the OAuth filter would try to invoke the remaining filters in the chain after emitting a local response, which triggers an ASSERT() in newer versions and corrupts memory on earlier ve…

  envoyproxy envoy
  Jun 9, 2022
• High 7.0
  CVE-2022-31045

  Ill-formed headers may lead to unexpected behavior in Istio

  Istio is an open platform to connect, manage, and secure microservices. In affected versions ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access resulting in undefined behavior or crashing. Users are most likely at …

  istio istio istio.io/istio Go
  Jun 9, 2022
• Medium 5.9
  CVE-2022-29224

  Segmentation fault leading to crash in Envoy

  Envoy is a cloud-native high-performance proxy. Versions of envoy prior to 1.22.1 are subject to a segmentation fault in the GrpcHealthCheckerImpl. Envoy can perform various types of upstream health checking. One of them uses gRPC. Envoy also has a feature wh…

  envoyproxy envoy
  Jun 9, 2022
• Unscored —
  CVE-2022-23772

  Uncontrolled memory consumption in math/big

  Rat.SetString in math/big in Go before 1.16.14 and 1.17.x before 1.17.7 has an overflow that can lead to Uncontrolled Memory Consumption.

  golang go stdlib golang-1.8 Debian Ubuntu Azure Linux Alpine Go
  Feb 11, 2022
• Unscored —
  CVE-2022-23773 Public exploit

  Incorrect access control in the go command in cmd/go/internal/modfetch

  cmd/go in Go before 1.16.14 and 1.17.x before 1.17.7 can misinterpret branch names that falsely appear to be version tags. This can lead to incorrect access control if an actor is supposed to be able to create branches but not tags.

  golang go golang-1.8 golang-1.13 Debian Ubuntu Azure Linux Alpine Go
  Feb 11, 2022
• Unscored —
  CVE-2022-23806

  Incorrect computation for some invalid field elements in crypto/elliptic

  Curve.IsOnCurve in crypto/elliptic in Go before 1.16.14 and 1.17.x before 1.17.7 can incorrectly return true in situations with a big.Int value that is not a valid field element.

  golang go stdlib lxd Debian Ubuntu Azure Linux Alpine Go
  Feb 11, 2022

References

• article
  https://access.redhat.com/security/updates/classification/#critical
• article
  https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2053429
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2053532
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2053541
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2088737
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2088738
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2088739
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2088740
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=2088819
• article
  https://issues.redhat.com/browse/OSSM-1107
• article
  https://issues.redhat.com/browse/OSSM-1614
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5004.json
• report
  https://access.redhat.com/security/cve/CVE-2022-23772
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-23772
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-23772
• article
  https://groups.google.com/g/golang-announce/c/SUsQn0aSgPQ
• report
  https://access.redhat.com/security/cve/CVE-2022-23773
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-23773
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-23773
• report
  https://access.redhat.com/security/cve/CVE-2022-23806
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-23806
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-23806
• report
  https://access.redhat.com/security/cve/CVE-2022-29224
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-29224
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-29224
• article
  https://github.com/envoyproxy/envoy/security/advisories/GHSA-m4j9-86g3-8f49
• report
  https://access.redhat.com/security/cve/CVE-2022-29225
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-29225
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-29225
• article
  https://github.com/envoyproxy/envoy/security/advisories/GHSA-75hv-2jjj-89hh
• report
  https://access.redhat.com/security/cve/CVE-2022-29226
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-29226
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-29226
• article
  https://github.com/envoyproxy/envoy/security/advisories/GHSA-h45c-2f94-prxh
• report
  https://access.redhat.com/security/cve/CVE-2022-29228
• advisory
  https://www.cve.org/CVERecord?id=CVE-2022-29228
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2022-29228
• article
  https://github.com/envoyproxy/envoy/security/advisories/GHSA-rww6-8h7g-8jf6