RHSA-2024:7725HighCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.5

Published
October 7, 2024
Last Modified
June 4, 2026

🔗 CVE IDs covered (9)

CVE-2024-32976 →CVE-2024-43788 →CVE-2024-43800 →CVE-2024-45590 →CVE-2024-43799 →CVE-2024-45806 →CVE-2024-23326 →CVE-2024-30255 →CVE-2024-32475 →

📋 Description

CVE-2024-23326 — envoy: Envoy incorrectly accepts HTTP 200 response for entering upgrade mode CVE-2024-30255 — envoy: HTTP/2 CPU exhaustion due to CONTINUATION frame flood CVE-2024-32475 — envoy: abnormal termination when using auto_sni with authority header longer than 255 characters CVE-2024-32976 — envoy: Brotli decompressor infinite loop CVE-2024-43788 — webpack: DOM Clobbering vulnerability in AutoPublicPathRuntimeModule CVE-2024-43799 — send: Code Execution Vulnerability in Send Library CVE-2024-43800 — serve-static: Improper Sanitization in serve-static CVE-2024-45590 — body-parser: Denial of Service Vulnerability in body-parser CVE-2024-45806 — envoy: Potential to manipulate x-envoy headers from external sources

🔗 References (12)