Go/istio.io/istio CVE-2022-23635: high 7.5, EPSS 1.66%
Unauthenticated control plane denial of service attack in Istio
Action: Upgrade istio.io/istio to 1.11.7 or later.
go get istio.io/istio@v1.13.1go get istio.io/istio@v1.12.4go get istio.io/istio@v1.11.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.13.0 | 1.13.1 | - |
| 1.12.0 | 1.12.4 | - |
| 0 | 1.11.7 | - |
Fixed versions
| 1.13.1 | 1.12.4 | 1.11.7 |
Sources
- osv: GHSA-856q-xv3c-7f2f
- https://github.com/istio/istio/security/advisories/GHSA-856q-xv3c-7f2f
- https://nvd.nist.gov/vuln/detail/CVE-2022-23635
- https://github.com/istio/istio/commit/5f3b5ed958ae75156f8656fe7b3794f78e94db84
- https://github.com/istio/istio
- https://istio.io/latest/news/security/istio-security-2022-003
CVE-2022-23635 · published · modified · JSON