Back to bug 2088741

Who When What Removed Added
Avinash Hanwate 2022-05-20 11:39:40 UTC CC security-response-team
Avinash Hanwate 2022-05-20 11:43:28 UTC Blocks 2088743
Avinash Hanwate 2022-05-20 11:45:46 UTC Deadline 2022-06-09
Sam Fowler 2022-06-09 23:01:08 UTC Doc Text A flaw was found in Envoy. Internal redirects for requests with bodies or trailers are not safe if the redirect prompts an Envoy-generated local reply. A remote attacker can exploit this to cause a denial of service.
Deadline 2022-06-09
Summary EMBARGOED CVE-2022-29227 envoy: Internal redirect crash for requests with body/trailers CVE-2022-29227 envoy: Internal redirect crash for requests with body/trailers
Group qe_staff, security
Red Hat Bugzilla 2023-02-03 23:11:35 UTC CC ovanders
Red Hat Bugzilla 2023-07-07 08:29:25 UTC CC security-response-team
Assignee security-response-team nobody

Back to bug 2088741