Filters
Software
Envoyproxy Envoyoghttp2 crash on OnBeginHeadersForStream in envoy
7.5
First published (updated )
Envoyproxy EnvoyJwt filter crash in the clear route cache with remote JWKs in envoy
7.5
First published (updated )
Envoyproxy EnvoyEnvoy crashes for LocalReply in http async client
7.5
First published (updated )
Envoyproxy EnvoyEnvoy affected by a crash in EnvoyQuicServerStream::OnInitialHeadersComplete()
7.5
First published (updated )
Envoyproxy EnvoyEnvoy crashes in QuicheDataReader::PeekVarInt62Length()
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Envoyproxy EnvoyEnvoy can crash due to uncaught nlohmann JSON exception
7.5
First published (updated )
Envoyproxy EnvoyEnvoy can enter an endless loop while decompressing Brotli data with extra input
7.5
First published (updated )
Envoyproxy EnvoyEnvoy crashes when idle and request per try timeout occur within the backoff interval
7.5
EPSS
0.05%
First published (updated )
Envoyproxy EnvoyEnvoy ext auth can be bypassed when Proxy protocol filter sets invalid UTF-8 metadata
8.6
EPSS
0.05%
First published (updated )
Envoyproxy EnvoyEnvoy crashes when using an address type that isn’t supported by the OS
7.5
EPSS
0.05%
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Envoyproxy EnvoyCrash in proxy protocol when command type of LOCAL in Envoy
7.5
EPSS
0.05%
First published (updated )
Envoyproxy EnvoyEnvoy incorrectly accepts HTTP 200 response for entering upgrade mode
8.2
First published (updated )
Apache Tomcat- Rapid Reset HTTP/2 vulnerability
First published (updated )
Envoyproxy EnvoyEnvoy vulnerable to CORS filter segfault when origin header is removed
7.5
First published (updated )
Envoyproxy EnvoyEnvoy vulnerable to incorrect handling of HTTP requests and responses with mixed case schemes
8.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
redhat/envoyEnvoy vulnerable to HTTP/2 memory leak in nghttp2 codec
7.5
First published (updated )
Envoyproxy EnvoyEnvoy may crash when a redirect url without a state param is received in the oauth filter
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Envoyproxy EnvoyX.509 subjectAltName matching bypass in Envoy
7.4
First published (updated )
redhat/envoyIncorrect handling of internal redirects results in crash in Envoy
7.5
First published (updated )
Envoyproxy EnvoyCrash when tunneling TCP over HTTP in Envoy
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Envoyproxy EnvoyIncorrect Authorization with specially crafted requests
8.6
First published (updated )
Envoyproxy EnvoyIncorrect handling of H2 GOAWAY + SETTINGS frames
8.6
First published (updated )
Envoyproxy EnvoyIncorrect handling of H/2 GOAWAY followed by SETTINGS frames
8.6
First published (updated )
Envoyproxy EnvoyContinued processing of requests after locally generated response
8.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Envoyproxy EnvoyIncorrectly handling of URI '#fragment' element as part of the path element
8.6
First published (updated )
Envoyproxy EnvoyExcessive CPU utilization when closing HTTP/2 streams
7.5
First published (updated )
Envoyproxy EnvoyIncorrect concatenation of multiple value request headers in ext-authz extension
8.6
First published (updated )
Envoyproxy EnvoyBypass of path matching rules using escaped slash characters
8.3
First published (updated )
Envoyproxy EnvoyAn issue was discovered in Envoy 1.14.0. There is a remotely exploitable crash for HTTP2 Metadata, b…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Envoyproxy EnvoyJWT authentication bypass with unknown issuer token
8.2
First published (updated )
IBM Cloud Pak for Security (CP4S)Envoy Proxy could provide weaker than expected security, caused by the logging of the incorrect down…
8.8
First published (updated )
IBM Cloud Pak for Security (CP4S)Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fa…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Envoyproxy EnvoyEnvoy master between 2d69e30 and 3b5acb2 may fail to parse request URL that requires host canonicali…
7.5
First published (updated )
Envoyproxy EnvoyEnvoy through 1.15.0 only considers the first value when multiple header values are present for some…
8.3
First published (updated )
Envoyproxy EnvoyEnvoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when process…
7.5
First published (updated )
Envoyproxy EnvoyEnvoy version 1.14.2, 1.13.2, 1.12.4 or earlier is susceptible to increased memory usage in the case…
7.5
First published (updated )
Envoyproxy EnvoyEnvoy version 1.14.2, 1.13.2, 1.12.4 or earlier may exhaust file descriptors and/or memory when acce…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Envoyproxy EnvoyEnvoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when proxyin…
7.5
First published (updated )
Envoyproxy EnvoyEnvoy 1.12.0 allows a remote denial of service because of resource loops, as demonstrated by a singl…
7.5
First published (updated )
Envoyproxy EnvoyUpon receiving each incoming request header data, Envoy will iterate over existing request headers t…
7.8
First published (updated )
Envoyproxy EnvoyIn Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc+…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.