Aller au contenu
en Se connecter
4.4 Moyenne

CVE-2022-23606 Envoy is an open source edge and service proxy, designed for cloud-native applications

Description

Envoy is an open source edge and service proxy, designed for cloud-native applications. When a cluster is deleted via Cluster Discovery Service (CDS) all idle connections established to endpoints in that cluster are disconnected. A recursion was introduced in the procedure of disconnecting idle connections that can lead to stack exhaustion and abnormal process termination when a cluster has a large number of idle connections. This infinite recursion causes Envoy to crash. Users are advised to upgrade.

Produits et versions touchés

Produit Versions touchées Corrigé en
envoy 1.21 1.21.0 → < 1.21.1 1.21.1
envoy 1.20 1.20.0 → < 1.20.2 1.20.2

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de envoy

Les 98 CVE de envoy →
CVE-2026-73511 Envoy is an open source edge and service proxy designed for cloud-native applications 5.3 Moyenne CVE-2026-73553 Envoy is an open source edge and service proxy designed for cloud-native applications 7.5 Élevée CVE-2026-73551 Envoy is an open source edge and service proxy designed for cloud-native applications 5.3 Moyenne CVE-2026-73546 Envoy is an open source edge and service proxy designed for cloud-native applications 7.4 Élevée
Suivre cette CVE