The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 secompressors accumulate decompressed data into an intermediate buffer before overwriting the body in the decode/encodeBody. This may allow an attacker to zip bomb the decompressor by sending a small highly compressed payload. Maliciously constructed zip files may exhaust system memory and cause a denial of service. Users are advised to upgrade. Users unable to upgrade may consider disabling decompression.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade olcne-prometheus-chartUpgrade istioUpgrade olcne-agentUpgrade kubeletUpgrade olcne-metallb-chartUpgrade olcne-oci-csi-chartUpgrade cri-toolsUpgrade kubectlUpgrade olcne-nginxUpgrade etcdUpgrade olcnectlUpgrade cri-oUpgrade kataUpgrade olcne-api-serverUpgrade olcne-utilsUpgrade istio-istioctlUpgrade olcne-grafana-chartUpgrade olcne-oci-ccm-chartUpgrade olcne-gluster-chartUpgrade olcne-istio-chartUpgrade kubeadmUpgrade olcne-olm-chart | Jul 12, 2022 | Jun 9, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub