The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1540 advisory.

  - envoyproxy/envoy: HTTP request with escaped slash characters can bypass Envoy's authorization mechanisms     (CVE-2021-29492)

  - istio/istio: HTTP request with escaped slash characters can bypass authorization mechanisms     (CVE-2021-31920)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9396 advisory.

  - An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference     and crash in TLS when an unknown TLS alert code is received. (CVE-2021-28683)

  - An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable integer overflow in which     a very large grpc-timeout value leads to unexpected timeout calculations. (CVE-2021-28682)

  - Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request     path with multiple slashes or escaped slash characters (%2F or %5C) could potentially bypass an Istio     authorization policy when path based authorization rules are used. (CVE-2021-31920)

  - Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability where an external     client can access unexpected services in the cluster, bypassing authorization checks, when a gateway is     configured with AUTO_PASSTHROUGH routing configuration. (CVE-2021-31921)

  - An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because     an empty METADATA map triggers a Reachable Assertion. (CVE-2021-29258)

  - Istio (1.8.x, 1.9.0-1.9.5 and 1.10.0-1.10.1) contains a remotely exploitable vulnerability where     credentials specified in the Gateway and DestinationRule credentialName field can be accessed from     different namespaces. (CVE-2021-34824)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1538 advisory.

  - envoyproxy/envoy: HTTP request with escaped slash characters can bypass Envoy's authorization mechanisms     (CVE-2021-29492)

  - istio/istio: HTTP request with escaped slash characters can bypass authorization mechanisms     (CVE-2021-31920)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9399 advisory.

  - An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference     and crash in TLS when an unknown TLS alert code is received. (CVE-2021-28683)

  - An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable integer overflow in which     a very large grpc-timeout value leads to unexpected timeout calculations. (CVE-2021-28682)

  - Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request     path with multiple slashes or escaped slash characters (%2F or %5C) could potentially bypass an Istio     authorization policy when path based authorization rules are used. (CVE-2021-31920)

  - Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability where an external     client can access unexpected services in the cluster, bypassing authorization checks, when a gateway is     configured with AUTO_PASSTHROUGH routing configuration. (CVE-2021-31921)

  - An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because     an empty METADATA map triggers a Reachable Assertion. (CVE-2021-29258)

  - Istio (1.8.x, 1.9.0-1.9.5 and 1.10.0-1.10.1) contains a remotely exploitable vulnerability where     credentials specified in the Gateway and DestinationRule credentialName field can be accessed from     different namespaces. (CVE-2021-34824)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9397 advisory.

  - An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference     and crash in TLS when an unknown TLS alert code is received. (CVE-2021-28683)

  - An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable integer overflow in which     a very large grpc-timeout value leads to unexpected timeout calculations. (CVE-2021-28682)

  - Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request     path with multiple slashes or escaped slash characters (%2F or %5C) could potentially bypass an Istio     authorization policy when path based authorization rules are used. (CVE-2021-31920)

  - Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability where an external     client can access unexpected services in the cluster, bypassing authorization checks, when a gateway is     configured with AUTO_PASSTHROUGH routing configuration. (CVE-2021-31921)

  - An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because     an empty METADATA map triggers a Reachable Assertion. (CVE-2021-29258)

  - Istio (1.8.x, 1.9.0-1.9.5 and 1.10.0-1.10.1) contains a remotely exploitable vulnerability where     credentials specified in the Gateway and DestinationRule credentialName field can be accessed from     different namespaces. (CVE-2021-34824)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9398 advisory.

  - An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable NULL pointer dereference     and crash in TLS when an unknown TLS alert code is received. (CVE-2021-28683)

  - An issue was discovered in Envoy through 1.71.1. There is a remotely exploitable integer overflow in which     a very large grpc-timeout value leads to unexpected timeout calculations. (CVE-2021-28682)

  - Istio before 1.8.6 and 1.9.x before 1.9.5 has a remotely exploitable vulnerability where an HTTP request     path with multiple slashes or escaped slash characters (%2F or %5C) could potentially bypass an Istio     authorization policy when path based authorization rules are used. (CVE-2021-31920)

  - Istio before 1.8.6 and 1.9.x before 1.9.5 contains a remotely exploitable vulnerability where an external     client can access unexpected services in the cluster, bypassing authorization checks, when a gateway is     configured with AUTO_PASSTHROUGH routing configuration. (CVE-2021-31921)

  - An issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, because     an empty METADATA map triggers a Reachable Assertion. (CVE-2021-29258)

  - Istio (1.8.x, 1.9.0-1.9.5 and 1.10.0-1.10.1) contains a remotely exploitable vulnerability where     credentials specified in the Gateway and DestinationRule credentialName field can be accessed from     different namespaces. (CVE-2021-34824)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
149445	RHEL 8 : Red Hat OpenShift Service Mesh 1.1.14 (RHSA-2021:1540)	Nessus	Red Hat Local Security Checks	5/13/2021	4/28/2024	high
152265	Oracle Linux 8 : olcne (ELSA-2021-9396)	Nessus	Oracle Linux Local Security Checks	8/6/2021	12/6/2023	critical
149435	RHEL 8 : Red Hat OpenShift Service Mesh 2.0.4 (RHSA-2021:1538)	Nessus	Red Hat Local Security Checks	5/12/2021	4/28/2024	high
152266	Oracle Linux 7 : olcne (ELSA-2021-9399)	Nessus	Oracle Linux Local Security Checks	8/6/2021	12/6/2023	critical
152267	Oracle Linux 7 : olcne (ELSA-2021-9397)	Nessus	Oracle Linux Local Security Checks	8/6/2021	12/6/2023	critical
152268	Oracle Linux 8 : olcne (ELSA-2021-9398)	Nessus	Oracle Linux Local Security Checks	8/6/2021	12/6/2023	critical

Detections

Analytics

Plugins Search

high

critical

high

critical

critical

critical