VDB
BDU%3A2022-04157
BDU%3A2022-04157
PUBLISHED
CVSS 10 CRITICAL
Уязвимость компонента decode/encodeBody прокси-сервера Envoy, позволяющая нарушителю вызвать отказ в обслуживании
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat Inc., Сообщество свободного программного обеспечения | Openshift Service Mesh, Envoy |
Timeline
- Jul 6, 2022 CVE Published
References
- https://github.com/envoyproxy/envoy/commit/cb4ef0b09200c720dfdb07e097092dd105450343 url
- https://github.com/envoyproxy/envoy/security/advisories/GHSA-75hv-2jjj-89hh url
- https://jfrog.com/blog/denial-of-service-vulnerability-in-envoy-proxy-cve-2022-29225/ url
- https://access.redhat.com/security/cve/cve-2022-29225 url