Filter
AND
Software
Apache Tomcat- Rapid Reset HTTP/2 vulnerability
First published (updated )
Envoyproxy EnvoyWhen parsing HTTP/1.x header values, Envoy 1.9.0 and before does not reject embedded zero characters…
8.3
First published (updated )
redhat/envoyEnvoy vulnerable to HTTP/2 memory leak in nghttp2 codec
7.5
First published (updated )
Envoyproxy EnvoyEnvoy vulnerable to CORS filter segfault when origin header is removed
7.5
First published (updated )
Envoyproxy EnvoyEnvoy vulnerable to incorrect handling of HTTP requests and responses with mixed case schemes
8.2
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Envoyproxy EnvoyEnvoy incorrectly accepts HTTP 200 response for entering upgrade mode
8.2
First published (updated )
Envoyproxy EnvoyEnvoy can enter an endless loop while decompressing Brotli data with extra input
7.5
First published (updated )
Envoyproxy EnvoyEnvoy crashes for LocalReply in http async client
7.5
First published (updated )
Envoyproxy Envoyoghttp2 crash on OnBeginHeadersForStream in envoy
7.5
First published (updated )
Envoyproxy EnvoyJwt filter crash in the clear route cache with remote JWKs in envoy
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Envoyproxy EnvoyEnvoy crashes when using an address type that isn’t supported by the OS
7.5
EPSS
0.05%
First published (updated )
Envoyproxy EnvoyEnvoy ext auth can be bypassed when Proxy protocol filter sets invalid UTF-8 metadata
8.6
EPSS
0.05%
First published (updated )
Envoyproxy EnvoyEnvoy 1.12.0 allows a remote denial of service because of resource loops, as demonstrated by a singl…
7.5
First published (updated )
Envoyproxy EnvoyUpon receiving each incoming request header data, Envoy will iterate over existing request headers t…
7.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Envoyproxy EnvoyIn Envoy through 1.11.1, users may configure a route to match incoming path headers via the libstdc+…
7.5
First published (updated )
IBM Cloud Pak for Security (CP4S)Envoy Proxy could provide weaker than expected security, caused by the logging of the incorrect down…
8.8
First published (updated )
IBM Cloud Pak for Security (CP4S)Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fa…
7.5
First published (updated )
Envoyproxy EnvoyEnvoy through 1.15.0 only considers the first value when multiple header values are present for some…
8.3
First published (updated )
Envoyproxy EnvoyEnvoy master between 2d69e30 and 3b5acb2 may fail to parse request URL that requires host canonicali…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Envoyproxy EnvoyEnvoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when process…
7.5
First published (updated )
Envoyproxy EnvoyEnvoy version 1.14.2, 1.13.2, 1.12.4 or earlier may consume excessive amounts of memory when proxyin…
7.5
First published (updated )
Envoyproxy EnvoyEnvoy version 1.14.2, 1.13.2, 1.12.4 or earlier is susceptible to increased memory usage in the case…
7.5
First published (updated )
Envoyproxy EnvoyEnvoy version 1.14.2, 1.13.2, 1.12.4 or earlier may exhaust file descriptors and/or memory when acce…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Envoyproxy EnvoyCrash when tunneling TCP over HTTP in Envoy
7.5
First published (updated )
Envoyproxy EnvoyIncorrect handling of H2 GOAWAY + SETTINGS frames
8.6
First published (updated )
Envoyproxy EnvoyIncorrect Authorization with specially crafted requests
8.6
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.