Skip to content
fr Sign in
7.5 High

CVE-2022-21655 Envoy is an open source edge and service proxy, designed for cloud-native applications

Description

Envoy is an open source edge and service proxy, designed for cloud-native applications. The envoy common router will segfault if an internal redirect selects a route configured with direct response or redirect actions. This will result in a denial of service. As a workaround turn off internal redirects if direct response entries are configured on the same listener.

Affected products and versions

Product Affected versions Fixed in
envoy 1.21 1.21.0 → < 1.21.1 1.21.1
envoy 1.20 1.20.0 → < 1.20.2 1.20.2
envoy 1.19 1.19.0 → < 1.19.3 1.19.3
envoy 1.18 earliest → < 1.18.6 1.18.6

References

Timeline

  1. Published
  2. Last modified

Other CVEs of envoy

The 98 CVEs of envoy →
CVE-2026-73511 Envoy is an open source edge and service proxy designed for cloud-native applications 5.3 Medium CVE-2026-73553 Envoy is an open source edge and service proxy designed for cloud-native applications 7.5 High CVE-2026-73551 Envoy is an open source edge and service proxy designed for cloud-native applications 5.3 Medium CVE-2026-73546 Envoy is an open source edge and service proxy designed for cloud-native applications 7.4 High
Track this CVE