a><a class="post-card tf-filter-item" href=/v1.16/zh/news/security/istio-security-2019-007/ data-category=security-bulletins><div class=post-date><p>Dec 10, 2019</p></div><div><h4 class=post-title>ISTIO-SECURITY-2019-007</h4><div class=post-summary><p>Envoy 中的堆溢出及错误的输入验证。</p><div><strong>CVE(s)</strong>: CVE-2019-18801 , CVE-2019-18802</div><div><strong>CVSS</strong>: 9.0</div><strong>Affected versions</strong>: 1.2 to 1.2.9 , 1.3 to 1.3.5 , 1.4 to 1.4.1</div><p class=post-author