CVE-2019-12243
1 advisory.
Go/istio.io/istio CVE-2019-12243: critical 9.3
Istio may not check inbound TCP connections against istio-policy
Action: Upgrade istio.io/istio to 1.1.7 or later.
go get istio.io/istio@v1.1.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.1.0 | 1.1.7 | - |
Fixed versions
| 1.1.7 |
Sources
- osv: GHSA-6g5f-f5pm-mjrg
- https://nvd.nist.gov/vuln/detail/CVE-2019-12243
- https://github.com/istio/istio/issues/13868
- https://github.com/istio/istio/pull/13893/commits/91faba277439dab798185730d1624bd53e37bb06
- https://istio.io/blog/2019/cve-2019-12243
CVE-2019-12243 · published · modified · JSON