high7.5
CVE-2019-12995
Istio before 1.2.2 mishandles certain access tokens, leading to "Epoch 0 terminated with an error" in Envoy.
Impact
Istio before 1.2.2 mishandles certain access tokens, leading to "Epoch 0 terminated with an error" in Envoy. This is related to a jwt_authenticator.cc segmentation fault.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Istio | Istio | before 1.2.2 |