title: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.3 RPMs security update
description: envoy: an untrusted remote client may send HTTP/2 requests that write to the heap outside of the request buffers when the upstream is HTTP/1 envoy: malformed request header may cause bypass of route matchers resulting in escalation of privileges or information disclosure envoy: malformed HTTP request without the Host header may cause abnormal termination of the Envoy process
cpes: cpe:/a:redhat:service_mesh:1.0::el7 cpe:/a:redhat:service_mesh:1.0::el8