Description
A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6. Rate-limiter avoidance, access-control bypass, CPU and memory exhaustion, and replay attacks may be possible due to improper HTTP header sanitization in Envoy.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | envoyproxy | 2.6.3, 2.5.6 | — |
| Red Hat | OpenShift Service Mesh 2 | — | — |
Advisories 1
- WID-SEC-2025-0207 Red Hat OpenShift (Service Mesh): Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 28, 2025
References
- https://access.redhat.com/security/cve/CVE-2025-0752 vdb-entry
- RHBZ#2339115 issue-tracking