https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 12:48:16 +0000 https://cve.radiocsirt.org/vuln/bit-envoy-2022-21654 <p><strong>Affected:</strong> Bitnami: envoy</p> <p>Envoy is an open source edge and service proxy, designed for cloud-native applications. Envoy&#39;s tls allows re-use when some cert validation settings have changed from their default configuration. The only workaround for this issue is to ensure that default tls settings are used. Users are advised to upgrade.</p> <p><strong>Affected:</strong> Bitnami: envoy</p> <p>Envoy is an open source edge and service proxy, designed for cloud-native applications. Envoy&#39;s tls allows re-use when some cert validation settings have changed from their default configuration. The only workaround for this issue is to ensure that default tls settings are used. Users are advised to upgrade.</p> https://cve.radiocsirt.org/vuln/bit-envoy-2022-21654 https://cve.radiocsirt.org/vuln/cnvd-2022-15535 cnvd-2022-15535 https://cve.radiocsirt.org/vuln/cnvd-2022-15535 https://cve.radiocsirt.org/vuln/euvd-2026-234412 EUVD-2026-234412 https://cve.radiocsirt.org/vuln/euvd-2026-234412 https://cve.radiocsirt.org/vuln/fkie_cve-2022-21654 <p>Envoy is an open source edge and service proxy, designed for cloud-native applications. Envoy&#39;s tls allows re-use when some cert validation settings have changed from their default configuration. The only workaround for this issue is to ensure that default tls settings are used. Users are advised to upgrade.</p> <p>Envoy is an open source edge and service proxy, designed for cloud-native applications. Envoy&#39;s tls allows re-use when some cert validation settings have changed from their default configuration. The only workaround for this issue is to ensure that default tls settings are used. Users are advised to upgrade.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-21654 https://cve.radiocsirt.org/vuln/gsd-2022-21654 gsd-2022-21654 https://cve.radiocsirt.org/vuln/gsd-2022-21654 https://cve.radiocsirt.org/vuln/rhsa-2022:1275 <p>envoy: Null pointer dereference when using JWT filter safe_regex match envoy: Use-after-free when response filters increase response data envoy: Use-after-free when tunneling TCP over HTTP envoy: Incorrect configuration handling allows mTLS session re-use without re-validation envoy: Incorrect handling of internal redirects to routes with a direct response entry envoy: Stack exhaustion when a cluster is deleted via Cluster Discovery Service istio: unauthenticated control plane denial of service attack istio: Unauthenticated control plane denial of service attack due to stack exhaustion</p> <p>envoy: Null pointer dereference when using JWT filter safe_regex match envoy: Use-after-free when response filters increase response data envoy: Use-after-free when tunneling TCP over HTTP envoy: Incorrect configuration handling allows mTLS session re-use without re-validation envoy: Incorrect handling of internal redirects to routes with a direct response entry envoy: Stack exhaustion when a cluster is deleted via Cluster Discovery Service istio: unauthenticated control plane denial of service attack istio: Unauthenticated control plane denial of service attack due to stack exhaustion</p> https://cve.radiocsirt.org/vuln/rhsa-2022:1275 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0970 <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial-of-Service-Zustand zu verursachen und Sicherheitsmaßnahmen zu umgehen.</p> <p>Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial-of-Service-Zustand zu verursachen und Sicherheitsmaßnahmen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0970