Skip to contentEnvoyproxy vulnerabilities
Newest
- envoyproxy envoyCrash when a cluster is deleted in EnvoyCVE-2022-23606Fix available4.4 Medium
- envoyproxy envoyNull pointer dereference in envoyCVE-2021-43824Fix available7.5 High
- envoyproxy envoy, pomerium +1 moreIncorrect Authorization with specially crafted requestsCVE-2021-39206Fix available8.6 High
- envoyproxy envoy, pomerium +1 moreExcessive CPU usage in PomeriumCVE-2021-39204Fix available7.5 High
- envoyproxy envoy, pomerium +1 moreIncorrect handling of H2 GOAWAY + SETTINGS framesCVE-2021-39162Fix available8.6 High
- envoyproxy envoyIncorrect handling of H/2 GOAWAY followed by SETTINGS framesCVE-2021-32780Fix available8.6 High
- envoyproxy envoyContinued processing of requests after locally generated responseCVE-2021-32781Fix available8.6 High
- envoyproxy envoyIncorrectly handling of URI '#fragment' element as part of the path elementCVE-2021-32779Fix available8.6 High
- envoyproxy envoyExcessive CPU utilization when closing HTTP/2 streamsCVE-2021-32778Fix available5.8 Medium
- envoyproxy envoyIncorrect concatenation of multiple value request headers in ext-authz extensionCVE-2021-32777Fix available8.6 High
- envoyproxy envoyBypass of path matching rules using escaped slash charactersCVE-2021-29492Fix availableEPSS 63.1%8.1 High
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.13 security updateCVE-2021-29258Fix available7.5 High
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.13 security updateCVE-2021-28683Fix available7.5 High
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.13 security updateCVE-2021-28682Fix available7.5 High
- envoyproxy envoyJWT authentication bypass with unknown issuer tokenCVE-2021-21378Fix available8.2 High
- envoyproxy envoyEnvoy before 1.16.1 logs an incorrect downstream address because it considers only the directly...CVE-2020-35470Fix available8.8 High
- envoyproxy envoyEnvoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation...CVE-2020-35471Fix available7.5 High
- envoyproxy envoyEnvoy master between 2d69e30 and 3b5acb2 may fail to parse request URL that requires host canonicalization.CVE-2020-250187.5 High
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 servicemesh-proxy security updateCVE-2020-25017Fix available8.3 High
- envoyproxy envoyTLS Validation Vulnerability in EnvoyCVE-2020-15104Fix available4.6 Medium
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 servicemesh-proxy security updateCVE-2020-12605Fix available7.5 High
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 servicemesh-proxy security updateCVE-2020-12604Fix available7.5 High
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 servicemesh-proxy security updateCVE-2020-8663Fix available7.5 High
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1 servicemesh-proxy security updateCVE-2020-12603Fix available7.5 High
- envoyproxy envoy, istio +1 moreIstio through 1.5.1 and Envoy through 1.14.1 have a data-leak issue. If there is a TCP connection...CVE-2020-11767Fix available3.1 Low
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.9 servicemesh-proxy security updateCVE-2020-8660Fix available5.3 Medium
- envoyproxy envoyRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.9 servicemesh-proxy security updateCVE-2020-86645.3 Medium
- envoyproxy envoy, redhat openshift service mesh +1 moreRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.9 servicemesh-proxy security updateCVE-2020-86617.5 High
- envoyproxy envoy, redhat openshift service mesh, debian linux +2 moreRed Hat Security Advisory: Red Hat OpenShift Service Mesh 1.0.9 servicemesh-proxy security updateCVE-2020-86597.5 High
- envoyproxy envoyAn issue was discovered in Envoy 1.12.0. Upon receipt of a malformed HTTP request without a Host...CVE-2019-188387.5 High
- envoyproxy envoyAn issue was discovered in Envoy 1.12.0. An untrusted remote client may send an HTTP header (such...CVE-2019-18802Fix available9.8 Critical
- envoyproxy envoyAn issue was discovered in Envoy 1.12.0. An untrusted remote client may send HTTP/2 requests that...CVE-2019-188019.8 Critical
- envoyproxy envoy, istio +1 moreEnvoy before 1.12.1 allows a remote denial of service because of resource loops, as demonstrated...CVE-2019-188367.5 High
- envoyproxy envoyUpon receiving each incoming request header data, Envoy will iterate over existing request...CVE-2019-15226EPSS 64.5%7.5 High
- envoyproxy envoyIn Envoy through 1.11.1, users may configure a route to match incoming path headers via the...CVE-2019-152257.5 High
- envoyproxy envoyEnvoyProxy Envoy Missing HTTP URL path normalizationCVE-2019-9901Fix available6.5 Medium
- envoyproxy envoy, redhat openshift service mesh +1 moreWhen parsing HTTP/1.x header values, Envoy 1.9.0 and before does not reject embedded zero...CVE-2019-99006.5 Medium