The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9396 advisory.

  - An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference     and crash in TLS when an unknown TLS alert code is received. (CVE-2021-28683)

  - An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable integer overflow in which     a very large grpc-timeout value leads to unexpected timeout calculations. (CVE-2021-28682)

  - Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request     path with multiple slashes or escaped slash characters (%2F or %5C) could potentially bypass an Istio     authorization policy when path based authorization rules are used. (CVE-2021-31920)

  - Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability where an external     client can access unexpected services in the cluster, bypassing authorization checks, when a gateway is     configured with AUTO_PASSTHROUGH routing configuration. (CVE-2021-31921)

  - An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because     an empty METADATA map triggers a Reachable Assertion. (CVE-2021-29258)

  - Istio (1.8.x, 1.9.0-1.9.5 and 1.10.0-1.10.1) contains a remotely exploitable vulnerability where     credentials specified in the Gateway and DestinationRule credentialName field can be accessed from     different namespaces. (CVE-2021-34824)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:1324 advisory.

  - envoyproxy/envoy: integer overflow handling large grpc-timeouts (CVE-2021-28682)

  - envoyproxy/envoy: NULL pointer dereference in TLS alert code handling (CVE-2021-28683)

  - envoyproxy/envoy: crash with empty HTTP/2 metadata map (CVE-2021-29258)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1322 advisory.

  - istio-pilot: requests to debug api can result in panic (CVE-2019-25014)

  - envoyproxy/envoy: integer overflow handling large grpc-timeouts (CVE-2021-28682)

  - envoyproxy/envoy: NULL pointer dereference in TLS alert code handling (CVE-2021-28683)

  - envoyproxy/envoy: crash with empty HTTP/2 metadata map (CVE-2021-29258)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9399 advisory.

  - An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference     and crash in TLS when an unknown TLS alert code is received. (CVE-2021-28683)

  - An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable integer overflow in which     a very large grpc-timeout value leads to unexpected timeout calculations. (CVE-2021-28682)

  - Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request     path with multiple slashes or escaped slash characters (%2F or %5C) could potentially bypass an Istio     authorization policy when path based authorization rules are used. (CVE-2021-31920)

  - Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability where an external     client can access unexpected services in the cluster, bypassing authorization checks, when a gateway is     configured with AUTO_PASSTHROUGH routing configuration. (CVE-2021-31921)

  - An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because     an empty METADATA map triggers a Reachable Assertion. (CVE-2021-29258)

  - Istio (1.8.x, 1.9.0-1.9.5 and 1.10.0-1.10.1) contains a remotely exploitable vulnerability where     credentials specified in the Gateway and DestinationRule credentialName field can be accessed from     different namespaces. (CVE-2021-34824)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9397 advisory.

  - An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference     and crash in TLS when an unknown TLS alert code is received. (CVE-2021-28683)

  - An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable integer overflow in which     a very large grpc-timeout value leads to unexpected timeout calculations. (CVE-2021-28682)

  - Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request     path with multiple slashes or escaped slash characters (%2F or %5C) could potentially bypass an Istio     authorization policy when path based authorization rules are used. (CVE-2021-31920)

  - Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability where an external     client can access unexpected services in the cluster, bypassing authorization checks, when a gateway is     configured with AUTO_PASSTHROUGH routing configuration. (CVE-2021-31921)

  - An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because     an empty METADATA map triggers a Reachable Assertion. (CVE-2021-29258)

  - Istio (1.8.x, 1.9.0-1.9.5 and 1.10.0-1.10.1) contains a remotely exploitable vulnerability where     credentials specified in the Gateway and DestinationRule credentialName field can be accessed from     different namespaces. (CVE-2021-34824)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9398 advisory.

  - An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference     and crash in TLS when an unknown TLS alert code is received. (CVE-2021-28683)

  - An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable integer overflow in which     a very large grpc-timeout value leads to unexpected timeout calculations. (CVE-2021-28682)

  - Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request     path with multiple slashes or escaped slash characters (%2F or %5C) could potentially bypass an Istio     authorization policy when path based authorization rules are used. (CVE-2021-31920)

  - Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability where an external     client can access unexpected services in the cluster, bypassing authorization checks, when a gateway is     configured with AUTO_PASSTHROUGH routing configuration. (CVE-2021-31921)

  - An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because     an empty METADATA map triggers a Reachable Assertion. (CVE-2021-29258)

  - Istio (1.8.x, 1.9.0-1.9.5 and 1.10.0-1.10.1) contains a remotely exploitable vulnerability where     credentials specified in the Gateway and DestinationRule credentialName field can be accessed from     different namespaces. (CVE-2021-34824)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
152265	Oracle Linux 8 : olcne (ELSA-2021-9396)	Nessus	Oracle Linux Local Security Checks	8/6/2021	12/6/2023	critical
148942	RHEL 8 : Red Hat OpenShift Service Mesh 2.0.3 (RHSA-2021:1324)	Nessus	Red Hat Local Security Checks	4/22/2021	1/3/2024	high
148943	RHEL 8 : Red Hat OpenShift Service Mesh 1.1.13 (RHSA-2021:1322)	Nessus	Red Hat Local Security Checks	4/22/2021	4/28/2024	high
152266	Oracle Linux 7 : olcne (ELSA-2021-9399)	Nessus	Oracle Linux Local Security Checks	8/6/2021	12/6/2023	critical
152267	Oracle Linux 7 : olcne (ELSA-2021-9397)	Nessus	Oracle Linux Local Security Checks	8/6/2021	12/6/2023	critical
152268	Oracle Linux 8 : olcne (ELSA-2021-9398)	Nessus	Oracle Linux Local Security Checks	8/6/2021	12/6/2023	critical

Detections

Analytics

Plugins Search

critical

high

high

critical

critical

critical