envoyproxy

48 results · Clear filters · Feed

• High 7.4
  CVE-2022-21656

  X.509 subjectAltName matching bypass in Envoy

  Envoy is an open source edge and service proxy, designed for cloud-native applications. The default_validator.cc implementation used to implement the default certificate validation routines has a "type confusion" bug when processing subjectAltNames. This proc…

  envoyproxy envoy
  Feb 22, 2022
• High 7.5
  CVE-2021-43824

  Null pointer dereference in envoy

  Envoy is an open source edge and service proxy, designed for cloud-native applications. In affected versions a crafted request crashes Envoy when a CONNECT request is sent to JWT filter configured with regex match. This provides a denial of service attack vec…

  envoyproxy envoy
  Feb 22, 2022
• High 8.6
  CVE-2021-32780

  Incorrect handling of H/2 GOAWAY followed by SETTINGS frames

  Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions Envoy transitions a H/2 connection to the CLOSED state when it receives a GOAWAY frame without any streams outstanding. The c…

  envoyproxy envoy
  Aug 24, 2021
• High 8.6
  CVE-2021-32781

  Continued processing of requests after locally generated response

  Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions after Envoy sends a locally generated response it must stop further processing of request or response data. However when loca…

  envoyproxy envoy
  Aug 24, 2021
• High 8.6
  CVE-2021-32779

  Incorrectly handling of URI '#fragment' element as part of the path element

  Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions envoy incorrectly handled a URI '#fragment' element as part of the path element. Envoy is configured with an RBAC filter for …

  envoyproxy envoy
  Aug 24, 2021
• High 8.6
  CVE-2021-32777

  Incorrect concatenation of multiple value request headers in ext-authz extension

  Envoy is an open source L7 proxy and communication bus designed for large modern service oriented architectures. In affected versions when ext-authz extension is sending request headers to the external authorization service it must merge multiple value header…

  envoyproxy envoy
  Aug 24, 2021
• High 8.1
  CVE-2021-29492 EPSS 63%

  Bypass of path matching rules using escaped slash characters

  Envoy is a cloud-native edge/middle/service proxy. Envoy does not decode escaped slash sequences `%2F` and `%5C` in HTTP URL paths in versions 1.18.2 and before. A remote attacker may craft a path with escaped slashes, e.g. `/something%2F..%2Fadmin`, to bypas…

  envoyproxy envoy
  May 28, 2021
• High 8.2
  CVE-2021-21378

  JWT authentication bypass with unknown issuer token

  Envoy is a cloud-native high-performance edge/middle/service proxy. In Envoy version 1.17.0 an attacker can bypass authentication by presenting a JWT token with an issuer that is not in the provider list when Envoy's JWT Authentication filter is configured wi…

  envoyproxy envoy
  Mar 11, 2021