Envoyproxy vulnerabilities
108 CVEs and advisories name Envoyproxy as an affected vendor, newest first. Follow it as a feed.
- CVE-2022-29225Zip bomb vulnerability in Envoy
- CVE-2022-29224Segmentation fault leading to crash in Envoy
- CVE-2021-43826Crash when tunneling TCP over HTTP in Envoy
- CVE-2021-43825Use-after-free in Envoy
- CVE-2022-21655Incorrect handling of internal redirects results in crash in Envoy
- CVE-2022-21654Incorrect configuration handling allows TLS session re-use without re-validation in Envoy
- CVE-2022-21657X.509 Extended Key Usage and Trust Purposes bypass in Envoy
- CVE-2022-21656X.509 subjectAltName matching bypass in Envoy
- CVE-2022-23606Crash when a cluster is deleted in Envoy
- CVE-2021-43824Null pointer dereference in envoy
- CVE-2021-32780Incorrect handling of H/2 GOAWAY followed by SETTINGS frames
- CVE-2021-32781Continued processing of requests after locally generated response
- CVE-2021-32779Incorrectly handling of URI '#fragment' element as part of the path element
- CVE-2021-32778Excessive CPU utilization when closing HTTP/2 streams
- CVE-2021-32777Incorrect concatenation of multiple value request headers in ext-authz extension
- CVE-2021-29492Bypass of path matching rules using escaped slash characters
- CVE-2021-21378JWT authentication bypass with unknown issuer token
- CVE-2020-15104TLS Validation Vulnerability in Envoy