CVE-2022-23606

mediumPriorität · verfolgen · 26EPSS 0.010 · 63. PerzentilDEEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

1.02% (63rd) EPSS

CVSS 4 · medium

Is it mine?

47 products

Prüfe deine Angriffsfläche

Who says so?

6 sources

cnnvd · enisa_euvd · osv · cert_bund

EPSS · bewertet 2026-10-27

Envoy is an open source edge and service proxy, designed for cloud-native applications. When a cluster is deleted via Cluster Discovery Service (CDS) all idle connections established to endpoints in that cluster are disconnected. A recursion was introduced in the procedure of disconnecting idle connections that can lead to stack exhaustion and abnormal process termination when a cluster has a large number of idle connections. This infinite recursion causes Envoy to crash. Users are advised to upgrade.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behobenservicemesh-proxy-0:2.1.2-4.el8.ppc64le as a component of OpenShift Service Mesh 2.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2022:1275
Behobenservicemesh-proxy-0:2.1.2-4.el8.s390x as a component of OpenShift Service Mesh 2.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2022:1275
Behobenservicemesh-proxy-0:2.1.2-4.el8.src as a component of OpenShift Service Mesh 2.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2022:1275
Behobenservicemesh-proxy-0:2.1.2-4.el8.x86_64 as a component of OpenShift Service Mesh 2.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2022:1275
Behobenservicemesh-proxy-debuginfo-0:2.1.2-4.el8.ppc64le as a component of OpenShift Service Mesh 2.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2022:1275
Behobenservicemesh-proxy-debuginfo-0:2.1.2-4.el8.s390x as a component of OpenShift Service Mesh 2.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2022:1275
Behobenservicemesh-proxy-debuginfo-0:2.1.2-4.el8.x86_64 as a component of OpenShift Service Mesh 2.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2022:1275
Behobenservicemesh-proxy-debugsource-0:2.1.2-4.el8.ppc64le as a component of OpenShift Service Mesh 2.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2022:1275
Behobenservicemesh-proxy-debugsource-0:2.1.2-4.el8.s390x as a component of OpenShift Service Mesh 2.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2022:1275
Behobenservicemesh-proxy-debugsource-0:2.1.2-4.el8.x86_64 as a component of OpenShift Service Mesh 2.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2022:1275
Behobenservicemesh-proxy-wasm-0:2.1.2-4.el8.noarch as a component of OpenShift Service Mesh 2.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2022:1275

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

6.5

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.04mediumAV:N/AC:L/Au:S/C:N/I:N/A:Pprimary · NVD / NIST USAusnutzbarkeit 8 · Auswirkung 2.9

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hprimary · NVD / NIST USAusnutzbarkeit 2.8 · Auswirkung 3.6

v3.14.4mediumCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:Hsecondary · ENISA EU

v3.14.4mediumCVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:Hsecondary · security-advisories@github.comAusnutzbarkeit 0.7 · Auswirkung 3.6

v3.16mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.16.5mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:Hsecondary · Red Hat Product Security US

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-674USCWE-770US

betroffene Produkte (47)

Betroffene Produkte und Versionsbereiche.

Amazon Linux 2alle Versionencert_bundDEcpe:/o:amazon:linux_2:-
Gentoo Linuxalle Versionencert_bundDEcpe:/o:gentoo:linux:-
Oracle Linuxalle Versionencert_bundDEcpe:/o:oracle:linux:-
Red Hat Enterprise Linuxalle Versionencert_bundDEcpe:/o:redhat:enterprise_linux:-
Red Hat OpenShift Container Platform 4alle Versionencert_bundDEcpe:/a:redhat:openshift:container_platform_4
envoyproxy envoy1.20.0, → 1.20.2enisa_euvdEU
envoyproxy envoy1.21.0, → 1.21.1enisa_euvdEU
envoyproxy envoy1.20.0 → 1.20.2nvdUScpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*
envoyproxy envoy= 1.21.0nvdUScpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*
Bitnami envoy1.20.0 → 1.20.2osvUSpkg:bitnami/envoy
Bitnami envoy1.21.0 → 1.21.1osvUSpkg:bitnami/envoy
servicemesh-0:2.1.2-4.el8.ppc64le as a component of OpenShift Service Mesh 2.1alle Versionennot affectedredhat_csafUS
servicemesh-0:2.1.2-4.el8.s390x as a component of OpenShift Service Mesh 2.1alle Versionennot affectedredhat_csafUS
servicemesh-0:2.1.2-4.el8.src as a component of OpenShift Service Mesh 2.1alle Versionennot affectedredhat_csafUS
servicemesh-0:2.1.2-4.el8.x86_64 as a component of OpenShift Service Mesh 2.1alle Versionennot affectedredhat_csafUS
servicemesh-cni-0:2.1.2-4.el8.ppc64le as a component of OpenShift Service Mesh 2.1alle Versionennot affectedredhat_csafUS
servicemesh-cni-0:2.1.2-4.el8.s390x as a component of OpenShift Service Mesh 2.1alle Versionennot affectedredhat_csafUS
servicemesh-cni-0:2.1.2-4.el8.x86_64 as a component of OpenShift Service Mesh 2.1alle Versionennot affectedredhat_csafUS
servicemesh-operator-0:2.1.2-4.el8.ppc64le as a component of OpenShift Service Mesh 2.1alle Versionennot affectedredhat_csafUS
servicemesh-operator-0:2.1.2-4.el8.s390x as a component of OpenShift Service Mesh 2.1alle Versionennot affectedredhat_csafUS

20 von 47 angezeigt

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

RHSA-2022:1275Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.1.2 security update2022-04-07csaf · redhat_csafUS
Red Hat OpenShift Service Mesh 2.1.2 Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
WID-SEC-W-2022-0970Red Hat OpenShift: Mehrere SchwachstellenDeutsch2022-04-07csaf · cert_bundDE
Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat OpenShift ausnutzen, um einen Denial-of-Service-Zustand zu verursachen und Sicherheitsmaßnahmen zu umgehen.
BIT-envoy-2022-23606Crash when a cluster is deleted in Envoy2024-03-06vendor · osvUS
Envoy is an open source edge and service proxy, designed for cloud-native applications. When a cluster is deleted via Cluster Discovery Service (CDS) all idle connections established to endpoints in that cluster are disconnected. A recursion was introduced in the procedure of disconnecting idle connections that can lead to stack exhaustion and abnormal process termination when a cluster has a large number of idle connections. This infinite recursion causes Envoy to crash. Users are advised to upgrade.

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd osv cert_bund nvd redhat_csaf NVD CVE.org MITRE

veröffentlicht 2022-02-22geändert 2026-06-17

Referenzen (11)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan