Количество 9
Количество 9
BDU:2024-02907
Уязвимость прокси-сервера Envoy, связанная с ошибками разыменования указателей, позволяющая нарушителю вызвать отказ в обслуживании
ROS-20240423-06
Множественные уязвимости consul
CVE-2024-23327
Envoy is a high-performance edge/middle/service proxy. When PPv2 is enabled both on a listener and subsequent cluster, the Envoy instance will segfault when attempting to craft the upstream PPv2 header. This occurs when the downstream request has a command type of LOCAL and does not have the protocol block. This issue has been addressed in releases 1.29.1, 1.28.1, 1.27.3, and 1.26.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVE-2024-23327
Envoy is a high-performance edge/middle/service proxy. When PPv2 is enabled both on a listener and subsequent cluster, the Envoy instance will segfault when attempting to craft the upstream PPv2 header. This occurs when the downstream request has a command type of LOCAL and does not have the protocol block. This issue has been addressed in releases 1.29.1, 1.28.1, 1.27.3, and 1.26.7. Users are advised to upgrade. There are no known workarounds for this vulnerability.
CVE-2024-23327
Envoy is a high-performance edge/middle/service proxy. When PPv2 is en ...
ELSA-2024-12348
ELSA-2024-12348: cri-o security update (IMPORTANT)
ELSA-2024-12347
ELSA-2024-12347: cri-o security update (IMPORTANT)
ELSA-2024-12329
ELSA-2024-12329: cri-o security update (IMPORTANT)
ELSA-2024-12328
ELSA-2024-12328: cri-o security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2024-02907 Уязвимость прокси-сервера Envoy, связанная с ошибками разыменования указателей, позволяющая нарушителю вызвать отказ в обслуживании | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
 | ROS-20240423-06 Множественные уязвимости consul | CVSS3: 7.5 | около 1 года назад | |
 | CVE-2024-23327 Envoy is a high-performance edge/middle/service proxy. When PPv2 is enabled both on a listener and subsequent cluster, the Envoy instance will segfault when attempting to craft the upstream PPv2 header. This occurs when the downstream request has a command type of LOCAL and does not have the protocol block. This issue has been addressed in releases 1.29.1, 1.28.1, 1.27.3, and 1.26.7. Users are advised to upgrade. There are no known workarounds for this vulnerability. | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
 | CVE-2024-23327 Envoy is a high-performance edge/middle/service proxy. When PPv2 is enabled both on a listener and subsequent cluster, the Envoy instance will segfault when attempting to craft the upstream PPv2 header. This occurs when the downstream request has a command type of LOCAL and does not have the protocol block. This issue has been addressed in releases 1.29.1, 1.28.1, 1.27.3, and 1.26.7. Users are advised to upgrade. There are no known workarounds for this vulnerability. | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
| CVE-2024-23327 Envoy is a high-performance edge/middle/service proxy. When PPv2 is en ... | CVSS3: 7.5 | 0% Низкий | больше 1 года назад |
| ELSA-2024-12348 ELSA-2024-12348: cri-o security update (IMPORTANT) | около 1 года назад | ||
| ELSA-2024-12347 ELSA-2024-12347: cri-o security update (IMPORTANT) | около 1 года назад | ||
| ELSA-2024-12329 ELSA-2024-12329: cri-o security update (IMPORTANT) | около 1 года назад | ||
| ELSA-2024-12328 ELSA-2024-12328: cri-o security update (IMPORTANT) | около 1 года назад |
Уязвимостей на страницу