This advisory addresses multiple vulnerabilities in Red Hat OpenShift Service Mesh 2.4.11, including CVE-2024-32475 (Envoy abnormal termination with long authority headers), CVE-2024-32976 (Envoy Brotli decompressor infinite loop), CVE-2024-43788 (webpack DOM clobbering), CVE-2024-43799 (code execution in send library), and CVE-2024-43800 (improper sanitization in serve-static). These vulnerabilities affect the Red Hat distribution of the Istio service mesh project for OpenShift Container Platform. The advisory provides fixes for these issues and recommends applying the update after prior errata are installed. No CVSS scores are provided in the advisory; severity is indicated as Important.

The vulnerabilities fixed in this advisory could lead to abnormal termination of Envoy proxies, infinite loops causing potential denial of service, DOM clobbering which may enable cross-site scripting or manipulation, remote code execution via the send library, and improper sanitization leading to potential security bypasses. The overall impact is rated as Important by Red Hat, indicating significant security concerns that could affect the stability and security of OpenShift Service Mesh deployments.

Red Hat has released an updated version of OpenShift Service Mesh Containers for 2.4.11 that addresses these vulnerabilities. Users should apply this update after ensuring all previously released relevant errata have been applied. Detailed update instructions are available from Red Hat's official documentation. No additional mitigations are indicated beyond applying the official update.