Description
Envoy before 1.16.1 mishandles dropped and truncated datagrams, as demonstrated by a segmentation fault for a UDP packet size larger than 1500.
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE Package Hub 15 SP3 | envoy-proxy | 1.14.6-bp153.3.4.1 | openSUSE-SU-2022:0065-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Leap 15.3 | envoy-proxy | 1.14.6-bp153.3.4.1 | openSUSE-SU-2022:0065-1 |
Advisories 1
- openSUSE-SU-2022:0065-1 Security update for envoy-proxy SUSE / openSUSE Security Updates · Feb 4, 2026