Advisories · Technology
envoy.
Every CVE that names envoy among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.6 High
Envoy vulnerable to OAuth2 credentials exploit with permanent validity
- envoy
- CWE-116
- CVSS 7.5 High
Envoy vulnerable to HTTP/2 memory leak in nghttp2 codec
- envoy
- Denial of service
- CVSS 6.5 Medium
Envoy may crash when a redirect url without a state param is received in the oauth filter
- envoy
- CWE-20
- CVSS 8.1 High
Envoy doesn't escape HTTP header values
- envoy
- CWE-20
- CVSS 4.8 Medium
Envoy may crash when a large request body is processed in Lua filter
- envoy
- Denial of service
- CVSS 5.4 Medium
Envoy forwards invalid Http2/Http3 downstream headers
- envoy
- CWE-20
- CVSS 5.4 Medium
Envoy gRPC client produces invalid protobuf when an HTTP header with non-UTF8 value is received.
- envoy
- CWE-20
- CVSS 8.2 High
Envoy client may fake the header `x-envoy-original-path`
- envoy
- CWE-20
- CVSS 7.5 High
Use after free in Envoy
- envoy
- Memory corruption
- CVSS 10.0 CriticalCritical · CVSS 9+
Trivial authentication bypass in Envoy
- envoy
- Authentication bypass
- CVSS 7.5 High
Reachable assertion in Envoy
- envoy
- Denial of service
- CVSS 7.5 High
Zip bomb vulnerability in Envoy
- envoy
- Denial of service
- CWE-409
- CVSS 5.9 Medium
Segmentation fault leading to crash in Envoy
- envoy
- Memory corruption
- CVSS 7.5 High
Crash when tunneling TCP over HTTP in Envoy
- envoy
- Memory corruption
- CVSS 6.1 Medium
Use-after-free in Envoy
- envoy
- Memory corruption
- CVSS 7.5 High
Incorrect handling of internal redirects results in crash in Envoy
- envoy
- CWE-670
- CVSS 7.4 High
Incorrect configuration handling allows TLS session re-use without re-validation in Envoy
- envoy
- Weak cryptography or TLS
- CVSS 6.8 Medium
X.509 Extended Key Usage and Trust Purposes bypass in Envoy
- envoy
- Weak cryptography or TLS
- CVSS 7.4 High
X.509 subjectAltName matching bypass in Envoy
- envoy
- Weak cryptography or TLS
- CVSS 4.4 Medium
Crash when a cluster is deleted in Envoy
- envoy
- Denial of service
- CVSS 7.5 High
Null pointer dereference in envoy
- envoy
- Memory corruption
- CVSS 8.6 High
Incorrect handling of H/2 GOAWAY followed by SETTINGS frames
- envoy
- CWE-754
- CVSS 8.6 High
Continued processing of requests after locally generated response
- envoy
- Memory corruption
- CVSS 8.6 High
Incorrectly handling of URI '#fragment' element as part of the path element
- envoy
- Broken access control
- CWE-551
- CVSS 5.8 Medium
Excessive CPU utilization when closing HTTP/2 streams
- envoy
- Denial of service
- CVSS 8.6 High
Incorrect concatenation of multiple value request headers in ext-authz extension
- envoy
- Broken access control
- CWE-551
- CVSS 8.1 HighCritical · CVSS 7+ and EPSS
Bypass of path matching rules using escaped slash characters
- envoy
- Path traversal
- CVSS 8.2 High
JWT authentication bypass with unknown issuer token
- envoy
- Authentication bypass
- CVSS 4.6 Medium
TLS Validation Vulnerability in Envoy
- envoy
- CWE-346