Istio before 1.1.13 and 1.2.x before 1.2.4 mishandles regular expressions for long URIs, leading to a denial of service during use of the JWT, VirtualService, HTTPAPISpecBinding, or QuotaSpecBinding API.
References
| Link | Resource |
|---|---|
| https://discuss.istio.io/t/upcoming-security-updates-in-istio-1-2-4-and-1-1-13/3383 | Vendor Advisory |
| https://gcc.gnu.org/bugzilla/show_bug.cgi?id=86164 | Exploit Issue Tracking Third Party Advisory |
| https://github.com/envoyproxy/envoy/issues/7728 | Exploit Issue Tracking Third Party Advisory |
| https://istio.io/blog/2019/istio-security-003-004/ | Vendor Advisory |
| https://discuss.istio.io/t/upcoming-security-updates-in-istio-1-2-4-and-1-1-13/3383 | Vendor Advisory |
| https://gcc.gnu.org/bugzilla/show_bug.cgi?id=86164 | Exploit Issue Tracking Third Party Advisory |
| https://github.com/envoyproxy/envoy/issues/7728 | Exploit Issue Tracking Third Party Advisory |
| https://istio.io/blog/2019/istio-security-003-004/ | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 04:27
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://discuss.istio.io/t/upcoming-security-updates-in-istio-1-2-4-and-1-1-13/3383 - Vendor Advisory | |
| References | () https://gcc.gnu.org/bugzilla/show_bug.cgi?id=86164 - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://github.com/envoyproxy/envoy/issues/7728 - Exploit, Issue Tracking, Third Party Advisory | |
| References | () https://istio.io/blog/2019/istio-security-003-004/ - Vendor Advisory |
Information
Published : 2019-08-13 18:15
Updated : 2024-11-21 04:27
NVD link : CVE-2019-14993
Mitre link : CVE-2019-14993
CVE.ORG link : CVE-2019-14993
JSON object : View
Products Affected
istio
- istio
CWE
CWE-185
Incorrect Regular Expression