CVE-2021-39155

Go/istio.io/istio CVE-2021-39155: high 8.3, EPSS 1.19%

Authorization Policy Bypass Due to Case Insensitive Host Comparison

Action: Upgrade istio.io/istio to 1.9.8 or later.

go get istio.io/istio@v1.9.8

go get istio.io/istio@v1.10.4

go get istio.io/istio@v1.11.1

Affected

Fixed versions

Sources

• osv: GHSA-7774-7vr3-cc8j
• https://github.com/istio/istio/security/advisories/GHSA-7774-7vr3-cc8j
• https://nvd.nist.gov/vuln/detail/CVE-2021-39155
• https://github.com/istio/istio/commit/084b417a486dbe9b9024d4812877016a484572b1
• https://github.com/istio/istio/commit/76ed51413ddd2a7fa253a368ab20a9cec5fb1cbe
• https://github.com/istio/istio/commit/90b00bdf891e6c770cb3235c14a9b1fda96cc7c5
• https://datatracker.ietf.org/doc/html/rfc4343
• https://github.com/istio/istio

CVE-2021-39155 · published 2021-08-30T16:15:56Z · modified 2026-09-10T03:49:07.371161372Z · JSON