Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 the OAuth filter would try to invoke the remaining filters in the chain after emitting a local response, which triggers an ASSERT() in newer versions and corrupts memory on earlier versions. continueDecoding() shouldn’t ever be called from filters after a local reply has been sent. Users are advised to upgrade. There are no known workarounds for this issue.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Oracle_linux | — | Upgrade olcne-utilsUpgrade kubectlUpgrade olcne-grafana-chartUpgrade etcdUpgrade cri-toolsUpgrade olcne-api-serverUpgrade olcne-oci-ccm-chartUpgrade olcne-istio-chartUpgrade olcne-prometheus-chartUpgrade olcne-agentUpgrade kataUpgrade istioUpgrade olcne-metallb-chartUpgrade olcnectlUpgrade cri-oUpgrade olcne-olm-chartUpgrade olcne-oci-csi-chartUpgrade olcne-gluster-chartUpgrade olcne-nginxUpgrade kubeadmUpgrade istio-istioctlUpgrade kubelet | Jul 12, 2022 | Jun 9, 2022 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub