https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 13:56:55 +0000 https://cve.radiocsirt.org/vuln/certfr-2022-avi-543 certfr-2022-avi-543 https://cve.radiocsirt.org/vuln/certfr-2022-avi-543 https://cve.radiocsirt.org/vuln/euvd-2026-234056 EUVD-2026-234056 https://cve.radiocsirt.org/vuln/euvd-2026-234056 https://cve.radiocsirt.org/vuln/fkie_cve-2022-31045 <p>Istio is an open platform to connect, manage, and secure microservices. In affected versions ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access resulting in undefined behavior or crashing. Users are most likely at risk if they have an Istio ingress Gateway exposed to external traffic. This vulnerability has been resolved in versions 1.12.8, 1.13.5, and 1.14.1. Users are advised to upgrade. There are no known workarounds for this issue.</p> <p>Istio is an open platform to connect, manage, and secure microservices. In affected versions ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access resulting in undefined behavior or crashing. Users are most likely at risk if they have an Istio ingress Gateway exposed to external traffic. This vulnerability has been resolved in versions 1.12.8, 1.13.5, and 1.14.1. Users are advised to upgrade. There are no known workarounds for this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-31045 https://cve.radiocsirt.org/vuln/ghsa-xwx5-5c9g-x68x <p><strong>Affected:</strong> Go: istio.io/istio</p> <p>### Impact Ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access resulting in undefined behavior or crashing.</p> <p>You are at most risk if you have an Istio ingress Gateway exposed to external traffic.</p> <p>### Patches 1.12.8, 1.13.5, 1.14.1</p> <p>### Workarounds No.</p> <p>### References More details can be found in the [Istio Security Bulletin](https://istio.io/latest/news/security/istio-security-2022-05)</p> <p>### For more information If you have any questions or comments about this advisory, please email us at [istio-security-vulnerability-reports@googlegroups.com](mailto:istio-security-vulnerability-reports@googlegroups.com)</p> <p><strong>Affected:</strong> Go: istio.io/istio</p> <p>### Impact Ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access resulting in undefined behavior or crashing.</p> <p>You are at most risk if you have an Istio ingress Gateway exposed to external traffic.</p> <p>### Patches 1.12.8, 1.13.5, 1.14.1</p> <p>### Workarounds No.</p> <p>### References More details can be found in the [Istio Security Bulletin](https://istio.io/latest/news/security/istio-security-2022-05)</p> <p>### For more information If you have any questions or comments about this advisory, please email us at [istio-security-vulnerability-reports@googlegroups.com](mailto:istio-security-vulnerability-reports@googlegroups.com)</p> https://cve.radiocsirt.org/vuln/ghsa-xwx5-5c9g-x68x https://cve.radiocsirt.org/vuln/gsd-2022-31045 gsd-2022-31045 https://cve.radiocsirt.org/vuln/gsd-2022-31045 https://cve.radiocsirt.org/vuln/rhsa-2022:5004 <p>golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString golang: cmd/go: misinterpretation of branch names can lead to incorrect access control golang: crypto/elliptic: IsOnCurve returns true for invalid field elements envoy: Segfault in GrpcHealthCheckerImpl envoy: Decompressors can be zip bombed envoy: oauth filter allows trivial bypass envoy: oauth filter calls continueDecoding() from within decodeHeaders() Istio: Unsafe memory access in metadata exchange.</p> <p>golang: math/big: uncontrolled memory consumption due to an unhandled overflow via Rat.SetString golang: cmd/go: misinterpretation of branch names can lead to incorrect access control golang: crypto/elliptic: IsOnCurve returns true for invalid field elements envoy: Segfault in GrpcHealthCheckerImpl envoy: Decompressors can be zip bombed envoy: oauth filter allows trivial bypass envoy: oauth filter calls continueDecoding() from within decodeHeaders() Istio: Unsafe memory access in metadata exchange.</p> https://cve.radiocsirt.org/vuln/rhsa-2022:5004 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0288 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen, einen nicht näher spezifizierten Angriff durchzuführen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial of Service Angriff durchzuführen, einen nicht näher spezifizierten Angriff durchzuführen, vertrauliche Informationen offenzulegen und Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0288