First published: Thu Jun 11 2020(Updated: )
Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for installation into an on-premise OpenShift Container Platform installation.<br>Security Fix(es):<br><li> nghttp2: overly large SETTINGS frames can lead to DoS (CVE-2020-11080)</li> For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software | Affected Version | How to fix |
---|---|---|
redhat/servicemesh-proxy | <1.1.2-3.el8 | 1.1.2-3.el8 |
redhat/servicemesh-proxy | <1.1.2-3.el8 | 1.1.2-3.el8 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of RHSA-2020:2523 is classified as important.
To fix RHSA-2020:2523, upgrade the servicemesh-proxy package to version 1.1.2-3.el8.
RHSA-2020:2523 addresses a denial of service vulnerability caused by overly large SETTINGS frames in nghttp2 (CVE-2020-11080).
Versions of servicemesh-proxy up to 1.1.2-3.el8 are affected by RHSA-2020:2523.
Yes, upgrading to the recommended version should resolve the issue related to RHSA-2020:2523.