Filters

Envoyproxy EnvoyPotential manipulate `x-envoy` headers from external sources in envoy

First published (updated )

Envoyproxy Envoyoghttp2 crash on OnBeginHeadersForStream in envoy

7.5
First published (updated )

Envoyproxy EnvoyMalicious log injection via access logs in envoy

First published (updated )

Envoyproxy EnvoyJwt filter crash in the clear route cache with remote JWKs in envoy

7.5
First published (updated )

Envoyproxy EnvoyEnvoy crashes for LocalReply in http async client

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Envoyproxy EnvoyEnvoy affected by a crash in EnvoyQuicServerStream::OnInitialHeadersComplete()

7.5
First published (updated )

Envoyproxy EnvoyEnvoy crashes in QuicheDataReader::PeekVarInt62Length()

7.5
First published (updated )

Envoyproxy EnvoyEnvoy can enter an endless loop while decompressing Brotli data with extra input

7.5
First published (updated )

Envoyproxy EnvoyEnvoy affected by a crash (use-after-free) in EnvoyQuicServerStream

First published (updated )

Envoyproxy EnvoyEnvoy can crash due to uncaught nlohmann JSON exception

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Envoyproxy EnvoyEnvoy OOM vector from HTTP async client with unbounded response buffer for mirror response

First published (updated )

Envoyproxy EnvoyEnvoy incorrectly accepts HTTP 200 response for entering upgrade mode

8.2
First published (updated )

Envoyproxy EnvoyEnvoy crashes when idle and request per try timeout occur within the backoff interval

7.5
EPSS
0.05%
First published (updated )

Envoyproxy EnvoyExcessive CPU usage when URI template matcher is configured using regex in Envoy

EPSS
0.05%
First published (updated )

Envoyproxy EnvoyEnvoy ext auth can be bypassed when Proxy protocol filter sets invalid UTF-8 metadata

8.6
EPSS
0.05%
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Envoyproxy EnvoyEnvoy crashes when using an address type that isn’t supported by the OS

7.5
EPSS
0.05%
First published (updated )

Envoyproxy EnvoyCrash in proxy protocol when command type of LOCAL in Envoy

7.5
EPSS
0.05%
First published (updated )

Apache Tomcat- Rapid Reset HTTP/2 vulnerability

First published (updated )

Envoyproxy EnvoyUse After Free

7.5
First published (updated )

Envoyproxy EnvoyInput Validation

8.2
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

redhat/envoySpecifically crafter response from an untrusted upstream service can cause the denial of service thr…

7.5
First published (updated )

Envoyproxy EnvoyUse After Free

First published (updated )

Envoyproxy EnvoyMalicious client is able to construct credentials with permanent validity in some specific scenario.…

First published (updated )

Envoyproxy EnvoyEnvoy doesn't escape HTTP header values

First published (updated )

Envoyproxy EnvoyEnvoy gRPC client produces invalid protobuf when an HTTP header with non-UTF8 value is received.

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Envoyproxy EnvoyEnvoy may crash when a redirect url without a state param is received in the oauth filter

7.5
First published (updated )

Envoyproxy EnvoyEnvoy may crash when a large request body is processed in Lua filter

First published (updated )

Envoyproxy EnvoyEnvoy forwards invalid Http2/Http3 downstream headers

First published (updated )

Envoyproxy EnvoyEnvoy client may fake the header `x-envoy-original-path`

First published (updated )

Envoyproxy EnvoyUse after free in Envoy

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

redhat/servicemesh-proxyTrivial authentication bypass in Envoy

First published (updated )

redhat/servicemesh-proxyReachable assertion in Envoy

7.5
First published (updated )

redhat/EnvoyZip bomb vulnerability in Envoy

7.5
First published (updated )

redhat/servicemesh-proxySegmentation fault leading to crash in Envoy

First published (updated )

Envoyproxy EnvoyX.509 Extended Key Usage and Trust Purposes bypass in Envoy

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Envoyproxy EnvoyX.509 subjectAltName matching bypass in Envoy

7.4
First published (updated )

Envoyproxy EnvoyCrash when a cluster is deleted in Envoy

First published (updated )

redhat/envoyIncorrect handling of internal redirects results in crash in Envoy

7.5
First published (updated )

redhat/envoyIncorrect configuration handling allows TLS session re-use without re-validation in Envoy

First published (updated )

Envoyproxy EnvoyCrash when tunneling TCP over HTTP in Envoy

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Envoyproxy EnvoyUse-after-free in Envoy

7.5
First published (updated )

Envoyproxy EnvoyNull pointer dereference in envoy

7.5
First published (updated )

Envoyproxy EnvoyIncorrect Authorization with specially crafted requests

8.6
First published (updated )

Envoyproxy EnvoyExcessive CPU usage in Pomerium

7.5
First published (updated )

Envoyproxy EnvoyIncorrect handling of H2 GOAWAY + SETTINGS frames

8.6
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Envoyproxy EnvoyIncorrect handling of H/2 GOAWAY followed by SETTINGS frames

8.6
First published (updated )

Envoyproxy EnvoyContinued processing of requests after locally generated response

8.6
First published (updated )

Envoyproxy EnvoyIncorrectly handling of URI '#fragment' element as part of the path element

8.6
First published (updated )

Envoyproxy EnvoyExcessive CPU utilization when closing HTTP/2 streams

7.5
First published (updated )

Envoyproxy EnvoyIncorrect concatenation of multiple value request headers in ext-authz extension

8.6
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2024 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203