Skip to content
CVE PROGRAM SOURCE RECORD7.1 High

CVE-2025-0752

Envoyproxy: openshift service mesh envoy http header sanitization bypass leading to dos and unauthorized access

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in OpenShift Service Mesh 2.6.3 and 2.5.6. Rate-limiter avoidance, access-control bypass, CPU and memory exhaustion, and replay attacks may be possible due to improper HTTP header sanitization in Envoy.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

envoyproxy

Default version status: unaffected

  • 2.6.3affected
  • 2.5.6affected

Red Hat OpenShift Service Mesh 2

Default version status: affected

Red Hat OpenShift Service Mesh 2

Default version status: unaffected

References