Skip to content
OpenAdvisories
Medium WID-SEC-2025-2085 2 CVEs

Red Hat OpenShift Service Mesh: Mehrere Schwachstellen

Published Sep 17, 2025 · Updated Jan 5, 2026 · Revision 2 · de-DE

Vendor: amazon Vendor: Red Hat Product: Linux 2 Product: openshift Platform: Linux

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift Service Mesh ausnutzen, um einen Denial of Service Angriff durchzuführen oder Userrechte zu erlangen.

Product

Red Hat OpenShift ist eine "Platform as a Service" (PaaS) Lösung zur Bereitstellung von Applikationen in der Cloud.

Vulnerabilities 2

  • High 7.5
    CVE-2025-54588

    Envoy: Race condition in Dynamic Forward Proxy leads to use-after-free and segmentation faults

    Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. Versions 1.34.0 through 1.34.4 and 1.35.0 contain a use-after-free (UAF) vulnerability in the DNS cache, causing abnormal process termination. The…

    envoyproxy envoy github.com/envoyproxy/envoy Go
  • Medium 6.3
    CVE-2025-55162

    Envoy: oAuth2 Filter Signout route will not clear cookies because of missing "secure;" flag

    Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In versions below 1.32.10 and 1.33.0 through 1.33.6, 1.34.0 through 1.34.4 and 1.35.0, insufficient Session Expiration in the Envoy OAuth2 filter …

    envoyproxy envoy

Revision history

  1. #2

    Neue Updates von Amazon aufgenommen

  2. #1

    Initiale Fassung

References