Skip to content

Vulnerabilities of envoyproxy envoy

Is your version affected?

CVE Summary Score Published
CVE-2024-39305 Envoy is a cloud-native, open source edge and service proxy 6.5 Medium Jul 1, 2024
CVE-2024-32974 Envoy affected by a crash in EnvoyQuicServerStream::OnInitialHeadersComplete() 5.9 Medium Jun 4, 2024
CVE-2024-32975 Envoy crashes in QuicheDataReader::PeekVarInt62Length() 5.9 Medium Jun 4, 2024
CVE-2024-32976 Envoy can enter an endless loop while decompressing Brotli data with extra input 7.5 High Jun 4, 2024
CVE-2024-34362 Envoy affected by a crash (use-after-free) in EnvoyQuicServerStream 5.9 Medium Jun 4, 2024
CVE-2024-34363 Envoy can crash due to uncaught nlohmann JSON exception 7.5 High Jun 4, 2024
CVE-2024-34364 Envoy OOM vector from HTTP async client with unbounded response buffer for mirror response 5.7 Medium Jun 4, 2024
CVE-2024-23326 Envoy is a cloud-native, open source edge and service proxy 5.9 Medium Jun 4, 2024
CVE-2024-32475 Envoy RELEASE_ASSERT using auto_sni with :authority header > 255 bytes 7.5 High Apr 18, 2024
CVE-2024-30255 Envoy is a cloud-native, open source edge and service proxy 5.3 Medium Apr 4, 2024
CVE-2024-27919 Envoy is a cloud-native, open-source edge and service proxy 7.5 High Apr 4, 2024
CVE-2024-23322 Envoy is a high-performance edge/middle/service proxy 7.5 High Feb 9, 2024
CVE-2024-23323 Envoy is a high-performance edge/middle/service proxy 4.3 Medium Feb 9, 2024
CVE-2024-23324 Envoy is a high-performance edge/middle/service proxy 8.6 High Feb 9, 2024
CVE-2024-23325 Envoy is a high-performance edge/middle/service proxy 7.5 High Feb 9, 2024
CVE-2024-23327 Envoy is a high-performance edge/middle/service proxy 7.5 High Feb 9, 2024
CVE-2023-35944 Envoy is an open source edge and service proxy designed for cloud-native applications 8.2 High Jul 25, 2023
CVE-2023-35943 Envoy is an open source edge and service proxy designed for cloud-native applications 6.3 Medium Jul 25, 2023
CVE-2023-35942 Envoy is an open source edge and service proxy designed for cloud-native applications 6.5 Medium Jul 25, 2023
CVE-2023-35941 Envoy is an open source edge and service proxy designed for cloud-native applications 8.6 High Jul 25, 2023
CVE-2023-35945 Envoy is a cloud-native high-performance edge/middle/service proxy 7.5 High Jul 13, 2023
CVE-2023-27496 Envoy is an open source edge and service proxy designed for cloud-native applications 6.5 Medium Apr 4, 2023
CVE-2023-27493 Envoy is an open source edge and service proxy designed for cloud-native applications 8.1 High Apr 4, 2023
CVE-2023-27492 Envoy is an open source edge and service proxy designed for cloud-native applications 4.8 Medium Apr 4, 2023
CVE-2023-27491 Envoy is an open source edge and service proxy designed for cloud-native applications 5.4 Medium Apr 4, 2023

Other envoyproxy products