Aller au contenu
Se connecter
6.5 Moyenne

CVE-2025-30157 Envoy is a cloud-native high-performance edge/middle/service proxy

Description

Envoy is a cloud-native high-performance edge/middle/service proxy. Prior to 1.33.1, 1.32.4, 1.31.6, and 1.30.10, Envoy's ext_proc HTTP filter is at risk of crashing if a local reply is sent to the external server due to the filter's life time issue. A known situation is the failure of a websocket handshake will trigger a local reply leading to the crash of Envoy. This vulnerability is fixed in 1.33.1, 1.32.4, 1.31.6, and 1.30.10.

Produits et versions touchés

Produit Versions touchées Corrigé en
envoy 1.33 1.33.0 → < 1.33.1 1.33.1
envoy 1.32 1.32.0 → < 1.32.4 1.32.4
envoy 1.31 1.31.0 → < 1.31.6 1.31.6
envoy 1.30 premières → < 1.30.10 1.30.10

Autres CVE de envoy

Les 98 CVE de envoy →
CVE-2026-73511 Envoy is an open source edge and service proxy designed for cloud-native applications 5.3 Moyenne CVE-2026-73553 Envoy is an open source edge and service proxy designed for cloud-native applications 7.5 Élevée CVE-2026-73551 Envoy is an open source edge and service proxy designed for cloud-native applications 5.3 Moyenne CVE-2026-73546 Envoy is an open source edge and service proxy designed for cloud-native applications 7.4 Élevée
Suivre cette CVE