← All advisories

High severityNVD Advisory· Published Nov 12, 2019· Updated Aug 5, 2024

CVE-2019-18817

CVE-2019-18817

Description

Istio 1.3.x before 1.3.5 allows Denial of Service because continue_on_listener_filters_timeout is set to True, a related issue to CVE-2019-18836.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
istio.io/istioGo	>= 1.3.0, < 1.3.5	1.3.5

Affected products

2

Istio/Istiodescription
ghsa-coords
pkg:golang/istio.io/istio
Range: >= 1.3.0, < 1.3.5

Patches

Vulnerability mechanics

References

7

github.com/advisories/GHSA-vc7h-cmp3-4hw5ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-18817ghsaADVISORY
github.com/istio/istio/commit/7570a1f5b56c108aed6ecfa5d2a6048f444bfb37ghsaWEB
github.com/istio/istio/issues/18229ghsax_refsource_MISCWEB
github.com/istio/istio/issues/18229ghsaWEB
istio.io/news/2019/announcing-1.3.5ghsaWEB
istio.io/news/2019/announcing-1.3.5/mitrex_refsource_MISC

News mentions

0

No linked articles in our index yet.