RHSA-2023:0542HighCVSS 7.5

Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.3.1 Containers security update

Published
January 30, 2023
Last Modified
August 4, 2026

🔗 CVE IDs covered (8)

CVE-2022-3962 →CVE-2022-27664 →CVE-2022-32189 →CVE-2022-39278 →CVE-2022-41715 →CVE-2021-4238 →CVE-2022-2879 →CVE-2022-2880 →

📋 Description

CVE-2021-4238 — goutils: RandomAlphaNumeric and CryptoRandomAlphaNumeric are not as random as they should be CVE-2022-2879 — golang: archive/tar: github.com/vbatts/tar-split: unbounded memory consumption when reading headers CVE-2022-2880 — golang: net/http/httputil: ReverseProxy should not forward unparseable query parameters CVE-2022-3962 — kiali: error message spoofing in kiali UI CVE-2022-27664 — golang: net/http: handle server errors after sending GOAWAY CVE-2022-32189 — golang: math/big: decoding big.Float and big.Rat types can panic if the encoded message is too short, potentially allowing a denial of service CVE-2022-39278 — Istio: Denial of service attack via a specially crafted message CVE-2022-41715 — golang: regexp/syntax: limit memory used by parsing regexps

🎯 Affected products28

  • RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/grafana-rhel8@sha256:5dfa0bcc7229240a63b0f2827ff8b8a89d67e338e997003ecf0519a124ea60c9_s390x as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/grafana-rhel8@sha256:75ae154f741911e2b514fee0ae344c3da1d10f52ee2b96705ddbc08580e02b50_amd64 as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/grafana-rhel8@sha256:85bc34ec14e604e1d2aa23a78f30cceb8e39d9c4cb5d3f50abb20285398116f4_ppc64le as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/istio-cni-rhel8@sha256:0fcec6ec95a42d4f51260843d7646ccdcfcb6ee33f7da53178e080acb11d9db8_ppc64le as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/istio-cni-rhel8@sha256:3fa9449daa00266fc428a9a83c880567ae162600bcfb7b545706aa2b02587e6c_amd64 as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/istio-cni-rhel8@sha256:a39c492781b5bb2f42ffd10c994a8ee80e67bcfe9ad1f27852095af72ef4efef_s390x as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/istio-must-gather-rhel8@sha256:617e3802d60b6ccdd0a9d99d72d6917644664c0c40ba3a53c54ce2b8d8c73383_s390x as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/istio-must-gather-rhel8@sha256:c93481d8b8768f4e18f0ca43cbfaee1a27ce2ca6122f2505302b8f899b039efb_amd64 as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/istio-must-gather-rhel8@sha256:f49446872837dbb08f5f60bbec882ac0a042f344dd2ce42588aad5bc4e987773_ppc64le as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/istio-rhel8-operator@sha256:afabcf0da6779927c712a1f17a6f2813652d6f2591d14b338d7498e6412c5f94_ppc64le as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/istio-rhel8-operator@sha256:c86d69ba6b201c3ba0bb2bb4cba1d3b50170bdd74bdf59cb73542960df40873a_amd64 as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/istio-rhel8-operator@sha256:ebbf0c175574c323e2434e1150210758bb8591cf044f6467c64ed1795e741f14_s390x as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/kiali-rhel8@sha256:0e3ae1aa2219d8de710ace3511b43ba4c51de1f4f1ee5800923a7cd2922c39f8_amd64 as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/kiali-rhel8@sha256:ef8552429ef57e8aca62643443692f29bd5cba6fa987375a6e8e74e6bc2e93f4_s390x as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/kiali-rhel8@sha256:f3febe52ab74ed6173f603315c48611de3de5e60a40312df9971fee901c54984_ppc64le as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/pilot-rhel8@sha256:1b163f346b6cd925a092c529050eb241b4e68432d65dbaf728c1d83450462c12_s390x as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/pilot-rhel8@sha256:8792677bd15a8b3e7bf593fb4057c63930eb89d50072774908bb5df3761dbcc1_amd64 as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/pilot-rhel8@sha256:e086f4f26ba7d4392dc127bbba7ac065e0a24d51e9cd21d04b7beb4de2fc38d6_ppc64le as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/prometheus-rhel8@sha256:721ab4359de7a70f5b3832a387e4ff18c98f8d2cfd1efd934bd1116cd68fdf29_ppc64le as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/prometheus-rhel8@sha256:8f7ec7a5e1e12c111e1e7021ed3a15f618df928320612edd8bd5afa43243b7d5_s390x as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/prometheus-rhel8@sha256:8fd4970929196a9cece5e881785f49bebcb7372f045f455d64a4cc20924ebdbf_amd64 as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/proxyv2-rhel8@sha256:0c232efe123daef18fd2025236c7fa43d58dd261afabe30537ad71e6e01b90d3_ppc64le as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/proxyv2-rhel8@sha256:7268afc10ac20b12b69426be691afe20395ed9a278850e4ea1f672b50f83299a_s390x as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/proxyv2-rhel8@sha256:99b524381910c0f0b6979107795b30171b7a823d9af4cd80cb44f846a64868f0_amd64 as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/ratelimit-rhel8@sha256:2882d2ef3e926340bf0d98958adad4d7933bdc9145417e362a1c95627c3fed45_amd64 as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/ratelimit-rhel8@sha256:2ce08569c5cac0d137554f6d9a224d243f76a16f86eaa94ea77dfea5889218af_s390x as a component of RHOSSM 2.3 for RHEL 8
  • openshift-service-mesh/ratelimit-rhel8@sha256:4cd6d47d20af9bc294fe0223dffa5c06d78ecc512ba07d9e0064f6d2e43bd6c4_ppc64le as a component of RHOSSM 2.3 for RHEL 8

✅ Remediation

Before applying this update, make sure all previously released errata relevant to your system have been applied. For details on how to apply this update, refer to: https://access.redhat.com/articles/11258 Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (34)