# envoy.

Every CVE that names envoy among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first (an older page)

- [Envoy vulnerable to OAuth2 credentials exploit with permanent validity](https://agentprime.io/advisories/CVE-2023-35941.md)
  `CVE-2023-35941` · CVE record: envoyproxy envoy · CVSS 8.6 High · Not analysed yet · Published 25 Jul 2023 · Tags: CWE-116
- [Envoy vulnerable to HTTP/2 memory leak in nghttp2 codec](https://agentprime.io/advisories/CVE-2023-35945.md)
  `CVE-2023-35945` · CVE record: envoyproxy envoy · CVSS 7.5 High · Not analysed yet · Published 13 Jul 2023 · Tags: Denial of service
- [Envoy may crash when a redirect url without a state param is received in the oauth filter](https://agentprime.io/advisories/CVE-2023-27496.md)
  `CVE-2023-27496` · CVE record: envoyproxy envoy · CVSS 6.5 Medium · Not analysed yet · Published 4 Apr 2023 · Tags: CWE-20
- [Envoy doesn't escape HTTP header values](https://agentprime.io/advisories/CVE-2023-27493.md)
  `CVE-2023-27493` · CVE record: envoyproxy envoy · CVSS 8.1 High · Not analysed yet · Published 4 Apr 2023 · Tags: CWE-20
- [Envoy may crash when a large request body is processed in Lua filter](https://agentprime.io/advisories/CVE-2023-27492.md)
  `CVE-2023-27492` · CVE record: envoyproxy envoy · CVSS 4.8 Medium · Not analysed yet · Published 4 Apr 2023 · Tags: Denial of service
- [Envoy forwards invalid Http2/Http3 downstream headers](https://agentprime.io/advisories/CVE-2023-27491.md)
  `CVE-2023-27491` · CVE record: envoyproxy envoy · CVSS 5.4 Medium · Not analysed yet · Published 4 Apr 2023 · Tags: CWE-20
- [Envoy gRPC client produces invalid protobuf when an HTTP header with non-UTF8 value is received.](https://agentprime.io/advisories/CVE-2023-27488.md)
  `CVE-2023-27488` · CVE record: envoyproxy envoy · CVSS 5.4 Medium · Not analysed yet · Published 4 Apr 2023 · Tags: CWE-20
- [Envoy client may fake the header \`x-envoy-original-path\`](https://agentprime.io/advisories/CVE-2023-27487.md)
  `CVE-2023-27487` · CVE record: envoyproxy envoy · CVSS 8.2 High · Not analysed yet · Published 4 Apr 2023 · Tags: CWE-20
- [Use after free in Envoy](https://agentprime.io/advisories/CVE-2022-29227.md)
  `CVE-2022-29227` · CVE record: envoyproxy envoy · CVSS 7.5 High · Not analysed yet · Published 9 Jun 2022 · Tags: Memory corruption
- [Trivial authentication bypass in Envoy](https://agentprime.io/advisories/CVE-2022-29226.md)
  `CVE-2022-29226` · CVE record: envoyproxy envoy · CVSS 10.0 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Jun 2022 · Tags: Authentication bypass
- [Reachable assertion in Envoy](https://agentprime.io/advisories/CVE-2022-29228.md)
  `CVE-2022-29228` · CVE record: envoyproxy envoy · CVSS 7.5 High · Not analysed yet · Published 9 Jun 2022 · Tags: Denial of service
- [Zip bomb vulnerability in Envoy](https://agentprime.io/advisories/CVE-2022-29225.md)
  `CVE-2022-29225` · CVE record: envoyproxy envoy · CVSS 7.5 High · Not analysed yet · Published 9 Jun 2022 · Tags: Denial of service, CWE-409
- [Segmentation fault leading to crash in Envoy](https://agentprime.io/advisories/CVE-2022-29224.md)
  `CVE-2022-29224` · CVE record: envoyproxy envoy · CVSS 5.9 Medium · Not analysed yet · Published 9 Jun 2022 · Tags: Memory corruption
- [Crash when tunneling TCP over HTTP in Envoy](https://agentprime.io/advisories/CVE-2021-43826.md)
  `CVE-2021-43826` · CVE record: envoyproxy envoy · CVSS 7.5 High · Not analysed yet · Published 22 Feb 2022 · Tags: Memory corruption
- [Use-after-free in Envoy](https://agentprime.io/advisories/CVE-2021-43825.md)
  `CVE-2021-43825` · CVE record: envoyproxy envoy · CVSS 6.1 Medium · Not analysed yet · Published 22 Feb 2022 · Tags: Memory corruption
- [Incorrect handling of internal redirects results in crash in Envoy](https://agentprime.io/advisories/CVE-2022-21655.md)
  `CVE-2022-21655` · CVE record: envoyproxy envoy · CVSS 7.5 High · Not analysed yet · Published 22 Feb 2022 · Tags: CWE-670
- [Incorrect configuration handling allows TLS session re-use without re-validation in Envoy](https://agentprime.io/advisories/CVE-2022-21654.md)
  `CVE-2022-21654` · CVE record: envoyproxy envoy · CVSS 7.4 High · Not analysed yet · Published 22 Feb 2022 · Tags: Weak cryptography or TLS
- [X.509 Extended Key Usage and Trust Purposes bypass in Envoy](https://agentprime.io/advisories/CVE-2022-21657.md)
  `CVE-2022-21657` · CVE record: envoyproxy envoy · CVSS 6.8 Medium · Not analysed yet · Published 22 Feb 2022 · Tags: Weak cryptography or TLS
- [X.509 subjectAltName matching bypass in Envoy](https://agentprime.io/advisories/CVE-2022-21656.md)
  `CVE-2022-21656` · CVE record: envoyproxy envoy · CVSS 7.4 High · Not analysed yet · Published 22 Feb 2022 · Tags: Weak cryptography or TLS
- [Crash when a cluster is deleted in Envoy](https://agentprime.io/advisories/CVE-2022-23606.md)
  `CVE-2022-23606` · CVE record: envoyproxy envoy · CVSS 4.4 Medium · Not analysed yet · Published 22 Feb 2022 · Tags: Denial of service
- [Null pointer dereference in envoy](https://agentprime.io/advisories/CVE-2021-43824.md)
  `CVE-2021-43824` · CVE record: envoyproxy envoy · CVSS 7.5 High · Not analysed yet · Published 22 Feb 2022 · Tags: Memory corruption
- [Incorrect handling of H/2 GOAWAY followed by SETTINGS frames](https://agentprime.io/advisories/CVE-2021-32780.md)
  `CVE-2021-32780` · CVE record: envoyproxy envoy · CVSS 8.6 High · Not analysed yet · Published 24 Aug 2021 · Tags: CWE-754
- [Continued processing of requests after locally generated response](https://agentprime.io/advisories/CVE-2021-32781.md)
  `CVE-2021-32781` · CVE record: envoyproxy envoy · CVSS 8.6 High · Not analysed yet · Published 24 Aug 2021 · Tags: Memory corruption
- [Incorrectly handling of URI '#fragment' element as part of the path element](https://agentprime.io/advisories/CVE-2021-32779.md)
  `CVE-2021-32779` · CVE record: envoyproxy envoy · CVSS 8.6 High · Not analysed yet · Published 24 Aug 2021 · Tags: Broken access control, CWE-551
- [Excessive CPU utilization when closing HTTP/2 streams](https://agentprime.io/advisories/CVE-2021-32778.md)
  `CVE-2021-32778` · CVE record: envoyproxy envoy · CVSS 5.8 Medium · Not analysed yet · Published 24 Aug 2021 · Tags: Denial of service
- [Incorrect concatenation of multiple value request headers in ext-authz extension](https://agentprime.io/advisories/CVE-2021-32777.md)
  `CVE-2021-32777` · CVE record: envoyproxy envoy · CVSS 8.6 High · Not analysed yet · Published 24 Aug 2021 · Tags: Broken access control, CWE-551
- [Bypass of path matching rules using escaped slash characters](https://agentprime.io/advisories/CVE-2021-29492.md)
  `CVE-2021-29492` · CVE record: envoyproxy envoy · CVSS 8.1 High · Critical (CVSS 7+ and EPSS) · EPSS 0.63 · Not analysed yet · Published 28 May 2021 · Tags: Path traversal
- [JWT authentication bypass with unknown issuer token](https://agentprime.io/advisories/CVE-2021-21378.md)
  `CVE-2021-21378` · CVE record: envoyproxy envoy · CVSS 8.2 High · Not analysed yet · Published 11 Mar 2021 · Tags: Authentication bypass
- [TLS Validation Vulnerability in Envoy](https://agentprime.io/advisories/CVE-2020-15104.md)
  `CVE-2020-15104` · CVE record: envoyproxy envoy · CVSS 4.6 Medium · Not analysed yet · Published 14 Jul 2020 · Tags: CWE-346

Newest: <https://agentprime.io/advisories/technology/envoy.md>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=envoy&cursor=WyIyMDIzLTA3LTI1VDE4OjI0OjExLjYxMzAwMFoiLCJDVkUtMjAyMy0zNTk0MiJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/envoy/?cursor=WyIyMDIzLTA3LTI1VDE4OjI0OjExLjYxMzAwMFoiLCJDVkUtMjAyMy0zNTk0MiJd>. Everything for agents: <https://agentprime.io/llms.txt>.