Skip to contentEnvoyproxy Envoy vulnerabilities
- envoyproxy envoyEnvoy crashes for LocalReply in http async clientCVE-2024-45810Fix available6.5 Medium
- envoyproxy envoyEnvoy Proxy use after free when route hash policy is configured with cookie attributesCVE-2024-39305Fix available6.5 Medium
- envoyproxy envoyEnvoy affected by a crash in EnvoyQuicServerStream::OnInitialHeadersComplete()CVE-2024-32974Fix available5.9 Medium
- envoyproxy envoyEnvoy crashes in QuicheDataReader::PeekVarInt62Length()CVE-2024-32975Fix available5.9 Medium
- envoyproxy envoyEnvoy can enter an endless loop while decompressing Brotli data with extra inputCVE-2024-32976Fix available7.5 High
- envoyproxy envoyEnvoy affected by a crash (use-after-free) in EnvoyQuicServerStreamCVE-2024-34362Fix available5.9 Medium
- envoyproxy envoyEnvoy can crash due to uncaught nlohmann JSON exceptionCVE-2024-34363Fix available7.5 High
- envoyproxy envoyEnvoy OOM vector from HTTP async client with unbounded response buffer for mirror responseCVE-2024-34364Fix available5.7 Medium
- envoyproxy envoyEnvoy incorrectly accepts HTTP 200 response for entering upgrade modeCVE-2024-23326Fix available5.9 Medium
- envoyproxy envoyEnvoy RELEASE_ASSERT using auto_sni with :authority header > 255 bytesCVE-2024-32475Fix available7.5 High
- envoyproxy envoyHTTP/2: CPU exhaustion due to CONTINUATION frame floodCVE-2024-30255Public exploitFix availableEPSS 85.0%5.3 Medium
- envoyproxy envoyHTTP/2: memory exhaustion due to CONTINUATION frame floodCVE-2024-27919Fix availableEPSS 83.9%7.5 High
- envoyproxy envoyEnvoy crashes when idle and request per try timeout occur within the backoff intervalCVE-2024-23322Fix available7.5 High
- envoyproxy envoyExcessive CPU usage when URI template matcher is configured using regex in EnvoyCVE-2024-23323Fix available4.3 Medium
- envoyproxy envoyEnvoy ext auth can be bypassed when Proxy protocol filter sets invalid UTF-8 metadataCVE-2024-23324Fix available8.6 High
- envoyproxy envoyEnvoy crashes when using an address type that isn’t supported by the OSCVE-2024-23325Fix available7.5 High
- envoyproxy envoyCrash in proxy protocol when command type of LOCAL in EnvoyCVE-2024-23327Fix available7.5 High
- envoyproxy envoyEnvoy vulnerable to incorrect handling of HTTP requests and responses with mixed case schemesCVE-2023-35944Fix available8.2 High
- envoyproxy envoyEnvoy vulnerable to CORS filter segfault when origin header is removedCVE-2023-35943Fix available6.3 Medium
- envoyproxy envoyEnvoy's gRPC access log crash caused by the listener drainingCVE-2023-35942Fix available6.5 Medium
- envoyproxy envoyEnvoy vulnerable to OAuth2 credentials exploit with permanent validityCVE-2023-35941Fix available8.6 High
- envoyproxy envoy, nghttp2, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +2 more +4 moreEnvoy vulnerable to HTTP/2 memory leak in nghttp2 codecCVE-2023-35945Fix available7.5 High
- eclipse jetty, ietf http, http/2 +166 more +168 moreEclipse Jetty XmlParser allows arbitrary DOCTYPE declarationsCVE-2023-44487In KEVPublic exploitFix availableEPSS 100.0%7.5 High
- envoyproxy envoyEnvoy may crash when a redirect url without a state param is received in the oauth filterCVE-2023-27496Fix available6.5 Medium
- envoyproxy envoyEnvoy doesn't escape HTTP header valuesCVE-2023-27493Fix available8.1 High
- envoyproxy envoyEnvoy may crash when a large request body is processed in Lua filterCVE-2023-27492Fix available4.8 Medium
- envoyproxy envoyEnvoy forwards invalid Http2/Http3 downstream headersCVE-2023-27491Fix available5.4 Medium
- envoyproxy envoyEnvoy gRPC client produces invalid protobuf when an HTTP header with non-UTF8 value is received.CVE-2023-27488Fix available5.4 Medium
- envoyproxy envoyEnvoy client may fake the header `x-envoy-original-path`CVE-2023-27487Fix available8.2 High
- envoyproxy envoyUse after free in EnvoyCVE-2022-29227Fix available7.5 High
- envoyproxy envoyTrivial authentication bypass in EnvoyCVE-2022-29226Fix available10.0 Critical
- envoyproxy envoyReachable assertion in EnvoyCVE-2022-29228Fix available7.5 High
- envoyproxy envoyZip bomb vulnerability in EnvoyCVE-2022-29225Fix available7.5 High
- envoyproxy envoySegmentation fault leading to crash in EnvoyCVE-2022-29224Fix available5.9 Medium
- envoyproxy envoyCrash when tunneling TCP over HTTP in EnvoyCVE-2021-43826Fix available7.5 High
- envoyproxy envoyUse-after-free in EnvoyCVE-2021-43825Fix available6.1 Medium
- envoyproxy envoyIncorrect handling of internal redirects results in crash in EnvoyCVE-2022-21655Fix available7.5 High
- envoyproxy envoyIncorrect configuration handling allows TLS session re-use without re-validation in EnvoyCVE-2022-21654Fix available7.4 High
- envoyproxy envoyX.509 Extended Key Usage and Trust Purposes bypass in EnvoyCVE-2022-21657Fix available6.8 Medium
- envoyproxy envoyX.509 subjectAltName matching bypass in EnvoyCVE-2022-21656Fix available7.4 High
- envoyproxy envoyCrash when a cluster is deleted in EnvoyCVE-2022-23606Fix available4.4 Medium
- envoyproxy envoyNull pointer dereference in envoyCVE-2021-43824Fix available7.5 High
- envoyproxy envoy, pomerium +1 moreIncorrect Authorization with specially crafted requestsCVE-2021-39206Fix available8.6 High
- envoyproxy envoy, pomerium +1 moreExcessive CPU usage in PomeriumCVE-2021-39204Fix available7.5 High
- envoyproxy envoy, pomerium +1 moreIncorrect handling of H2 GOAWAY + SETTINGS framesCVE-2021-39162Fix available8.6 High
- envoyproxy envoyIncorrect handling of H/2 GOAWAY followed by SETTINGS framesCVE-2021-32780Fix available8.6 High
- envoyproxy envoyContinued processing of requests after locally generated responseCVE-2021-32781Fix available8.6 High
- envoyproxy envoyIncorrectly handling of URI '#fragment' element as part of the path elementCVE-2021-32779Fix available8.6 High
- envoyproxy envoyExcessive CPU utilization when closing HTTP/2 streamsCVE-2021-32778Fix available5.8 Medium
- envoyproxy envoyIncorrect concatenation of multiple value request headers in ext-authz extensionCVE-2021-32777Fix available8.6 High
- Show moreLoading…