Skip to content
OpenAdvisories

Vendor

envoyproxy

108 known vulnerabilities.

Products

envoy 98 gateway 10
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2024-30255 Public exploit EPSS 85%

    HTTP/2: CPU exhaustion due to CONTINUATION frame flood

    Envoy is a cloud-native, open source edge and service proxy. The HTTP/2 protocol stack in Envoy versions prior to 1.29.3, 1.28.2, 1.27.4, and 1.26.8 are vulnerable to CPU exhaustion due to flood of CONTINUATION frames. Envoy's HTTP/2 codec allows the client t…

    envoyproxy envoy