tegory=security-bulletins><div class=post-date><p>Jun 9, 2022</p></div><div><h4 class=post-title>ISTIO-SECURITY-2022-005</h4><div class=post-summary><p>在某些配置中，发送给 Envoy 的格式错误的请求头可能会导致意外的内存访问冲突，从而产生未定义的行为或崩溃。</p><div><strong>CVE(s)</strong>: CVE-2022-31045 , CVE-2022-29225 , CVE-2022-29224 , CVE-2022-29226 , CVE-2022-29228 , CVE-2022-29227</div><div><strong>CVSS</strong>: 7.5</div><strong>Affected versions</strong