critique
CVE-2022-31045
Istio: Unsafe memory access in metadata exchange.
Dans la Trivy database depuis au moins le 24 oct. 2026, 07:11 UTCLa date d'entrée avant ce build n'est pas enregistrée.
Sévérité par source
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
GHSA5.9CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Red Hat9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Le label propre à Trivy est CRITICAL. Critique selon NVD. Plus basse selon Oracle (élevée), GHSA (moyenne), Red Hat (moyenne).
Description
Istio is an open platform to connect, manage, and secure microservices. In affected versions ill-formed headers sent to Envoy in certain configurations can lead to unexpected memory access resulting in undefined behavior or crashing. Users are most likely at risk if they have an Istio ingress Gateway exposed to external traffic. This vulnerability has been resolved in versions 1.12.8, 1.13.5, and 1.14.1. Users are advised to upgrade. There are no known workarounds for this issue.
Paquets affectés et versions corrigées
| Source | Paquet | Corrigé en |
|---|---|---|
| chainguard | cert-manager-istio-csr, cert-manager-istio-csr-fips, istio-pilot-agent-1.22 et 5 autres | 0 |
| go::GitHub Security Advisory Go | istio.io/istio | 1.12.18, 1.13.5, 1.14.1 |
| Oracle Linux 7 | cri-o, cri-tools, etcd et 19 autres | 1.23.3-1.el7 et 7 autres |
| Oracle Linux 8 | cri-o, cri-tools, etcd et 19 autres | 1.23.3-1.el8 et 7 autres |
| Red Hat | servicemesh, servicemesh-istioctl, servicemesh-mixc et 3 autres | pas de correctif indiqué |
| wolfi | cert-manager-istio-csr | 0 |
Afficher les 60 entrées de 6 sources
| Source | Paquet | Corrigé en |
|---|---|---|
| chainguard | cert-manager-istio-csr | 0 |
| chainguard | cert-manager-istio-csr-fips | 0 |
| chainguard | istio-pilot-agent-1.22 | 0 |
| chainguard | istio-pilot-discovery-1.22 | 0 |
| chainguard | kgateway-2.3 | 0 |
| chainguard | kgateway-2.4 | 0 |
| chainguard | kgateway-fips-2.3 | 0 |
| chainguard | kgateway-fips-2.4 | 0 |
| go::GitHub Security Advisory Go | istio.io/istio | 1.12.18, 1.13.5, 1.14.1 |
| Oracle Linux 7 | cri-o | 1.23.3-1.el7 |
| Oracle Linux 7 | cri-tools | 1.23.0-1.el7 |
| Oracle Linux 7 | etcd | 3.5.1-2.el7 |
| Oracle Linux 7 | istio | 1.13.7-1.el7 |
| Oracle Linux 7 | istio-istioctl | 1.13.7-1.el7 |
| Oracle Linux 7 | kata | 1.12.1-5.el7 |
| Oracle Linux 7 | kubeadm | 1.23.7-1.el7 |
| Oracle Linux 7 | kubectl | 1.23.7-1.el7 |
| Oracle Linux 7 | kubelet | 1.23.7-1.el7 |
| Oracle Linux 7 | olcne-agent | 1.5.5-1.el7 |
| Oracle Linux 7 | olcne-api-server | 1.5.5-1.el7 |
| Oracle Linux 7 | olcne-gluster-chart | 1.5.5-1.el7 |
| Oracle Linux 7 | olcne-grafana-chart | 1.5.5-1.el7 |
| Oracle Linux 7 | olcne-istio-chart | 1.5.5-1.el7 |
| Oracle Linux 7 | olcne-metallb-chart | 1.5.5-1.el7 |
| Oracle Linux 7 | olcne-nginx | 1.5.5-1.el7 |
| Oracle Linux 7 | olcne-oci-ccm-chart | 1.5.5-1.el7 |
| Oracle Linux 7 | olcne-oci-csi-chart | 1.4.7-1.el7 |
| Oracle Linux 7 | olcne-olm-chart | 1.5.5-1.el7 |
| Oracle Linux 7 | olcne-prometheus-chart | 1.5.5-1.el7 |
| Oracle Linux 7 | olcne-utils | 1.5.5-1.el7 |
| Oracle Linux 7 | olcnectl | 1.5.5-1.el7 |
| Oracle Linux 8 | cri-o | 1.23.3-1.el8 |
| Oracle Linux 8 | cri-tools | 1.23.0-1.el8 |
| Oracle Linux 8 | etcd | 3.5.1-2.el8 |
| Oracle Linux 8 | istio | 1.13.7-1.el8 |
| Oracle Linux 8 | istio-istioctl | 1.13.7-1.el8 |
| Oracle Linux 8 | kata | 1.12.1-5.el8 |
| Oracle Linux 8 | kubeadm | 1.23.7-1.el8 |
| Oracle Linux 8 | kubectl | 1.23.7-1.el8 |
| Oracle Linux 8 | kubelet | 1.23.7-1.el8 |
| Oracle Linux 8 | olcne-agent | 1.5.5-1.el8 |
| Oracle Linux 8 | olcne-api-server | 1.5.5-1.el8 |
| Oracle Linux 8 | olcne-gluster-chart | 1.5.5-1.el8 |
| Oracle Linux 8 | olcne-grafana-chart | 1.5.5-1.el8 |
| Oracle Linux 8 | olcne-istio-chart | 1.5.5-1.el8 |
| Oracle Linux 8 | olcne-metallb-chart | 1.5.5-1.el8 |
| Oracle Linux 8 | olcne-nginx | 1.5.5-1.el8 |
| Oracle Linux 8 | olcne-oci-ccm-chart | 1.5.5-1.el8 |
| Oracle Linux 8 | olcne-oci-csi-chart | 1.4.7-1.el8 |
| Oracle Linux 8 | olcne-olm-chart | 1.5.5-1.el8 |
| Oracle Linux 8 | olcne-prometheus-chart | 1.5.5-1.el8 |
| Oracle Linux 8 | olcne-utils | 1.5.5-1.el8 |
| Oracle Linux 8 | olcnectl | 1.5.5-1.el8 |
| Red Hat | servicemesh | pas de correctif indiqué |
| Red Hat | servicemesh-istioctl | pas de correctif indiqué |
| Red Hat | servicemesh-mixc | pas de correctif indiqué |
| Red Hat | servicemesh-mixs | pas de correctif indiqué |
| Red Hat | servicemesh-pilot-agent | pas de correctif indiqué |
| Red Hat | servicemesh-pilot-discovery | pas de correctif indiqué |
| wolfi | cert-manager-istio-csr | 0 |
Références
- https://access.redhat.com/security/cve/CVE-2022-31045
- https://github.com/istio/istio
- https://github.com/istio/istio/security/advisories/GHSA-xwx5-5c9g-x68x
- https://istio.io/latest/news/security/istio-security-2022-005/#cve-2022-31045
- https://istio.io/latest/news/security/istio-security-2022-05
- https://linux.oracle.com/cve/CVE-2022-31045.html
- https://linux.oracle.com/errata/ELSA-2022-9774.html
- https://nvd.nist.gov/vuln/detail/CVE-2022-31045