CVE-2019-14993

ADVISORY - github

Summary

Istio before 1.1.13 and 1.2.x before 1.2.4 mishandles regular expressions for long URIs, leading to a denial of service during use of the JWT, VirtualService, HTTPAPISpecBinding, or QuotaSpecBinding API.

EPSS Score⁠: 0.00785 (0.735)

Common Weakness Enumeration (CWE)

ADVISORY - nist

CWE-185⁠

Incorrect Regular Expression

ADVISORY - github

CWE-185⁠

Incorrect Regular Expression

ADVISORY - gitlab

CWE-1035⁠

OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities

CWE-185⁠

Incorrect Regular Expression

CWE-937⁠

OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities

ADVISORY - redhat

CWE-185⁠

Incorrect Regular Expression

Impacted images

Advisories

Sign in to Docker Scout

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.