ith telemetry v2 enabled and Istio 1.5 contain the following vulnerability when telemetry v2 is enabled:</p><ul><li><strong><a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-10739">CVE-2020-10739</a></strong>:
By sending a specially crafted packet, an attacker could trigger a Null Pointer Exception resulting in a Denial of Service. This could be sent to the ingress gateway or a sidecar.<ul><li>CVSS Score: 7.5 <a href="https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:A/AC:L/PR:L/