What is RHEA-2020:1416?

RHEA-2020:1416 is a security advisory published by Red Hat Product Security with High severity. Red Hat Enhancement Advisory: Red Hat OpenShift Service Mesh 1.1.0 RPMs

Which CVE IDs does RHEA-2020:1416 cover?

RHEA-2020:1416 covers the following CVE IDs: CVE-2019-14993, CVE-2019-15225. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHEA-2020:1416?

RHEA-2020:1416 has a CVSS v3 base score of 7.5, published by Red Hat Product Security.

RHEA-2020:1416HighCVSS 7.5

Red Hat Enhancement Advisory: Red Hat OpenShift Service Mesh 1.1.0 RPMs

Vendor

Red Hat Product Security

Published

April 8, 2020

Last Modified

June 27, 2026

🔗 CVE IDs covered (2)

CVE-2019-14993 →CVE-2019-15225 →

📋 Description

CVE-2019-14993 — istio/envoy: mishandling regular expressions for long URIs leading to DoS CVE-2019-15225 — envoy: crafted request with long URI allows remote attacker to cause denial of service

🔗 References (3)

selfhttps://access.redhat.com/errata/RHEA-2020:1416
externalhttps://issues.redhat.com/browse/MAISTRA-907
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2020/rhea-2020_1416.json