Known vulnerabilities in envoy 1.25.2 - page 2

Software: envoy
Version: 1.25.2
Software CPE: cpe:2.3:a:cncf:envoy:*:*:*:*:*:*:*:*
Total vulnerabilities: 53
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting envoy version 1.25.2 envoy 1.25.2 is affected by 53 vulnerabilities: 7 high, 41 medium, 5 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU95131 - Out-of-bounds read
CVE-2024-7264
CWE-125 Medium
No
No
1.28.6, 1.29.8, 1.30.5, 1.31.1 01.08.2024 SB2024080110
SB2024080117
SB20240805104
and 43 more
#VU91158 - Memory corruption
CVE-2024-34364
CWE-119 Medium
No
No
1.27.6, 1.28.4, 1.29.5, 1.30.2 05.06.2024 SB2024060518
SB2024060519
SB2024070220
#VU91157 - Use of Weak Credentials
CVE-2024-23326
CWE-1391 Medium
No
No
1.27.6, 1.28.4, 1.29.5, 1.30.2 05.06.2024 SB2024060518
SB2024060519
SB2024070220
and 1 more
#VU91156 - Use After Free
CVE-2024-34362
CWE-416 Medium
No
No
1.27.6, 1.28.4, 1.29.5, 1.30.2 05.06.2024 SB2024060518
SB2024060519
SB2024070220
#VU91154 - Use After Free
CVE-2024-32974
CWE-416 Medium
No
No
1.27.6, 1.28.4, 1.29.5, 1.30.2 05.06.2024 SB2024060518
SB2024060519
SB2024070220
#VU91153 - Integer underflow
CVE-2024-32975
CWE-191 Medium
No
No
1.27.6, 1.28.4, 1.29.5, 1.30.2 05.06.2024 SB2024060518
SB2024060519
SB2024070220
#VU91152 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-32976
CWE-835 Medium
No
No
1.27.6, 1.28.4, 1.29.5, 1.30.2 05.06.2024 SB2024060518
SB2024060519
SB2024070220
and 2 more
#VU88855 - Incorrect Check of Function Return Value
CVE-2024-32475
CWE-253 Medium
No
No
1.27.5, 1.28.3, 1.29.4, 1.30.1 19.04.2024 SB2024041931
SB2024052109
SB2024070220
and 2 more
#VU88181 - Resource exhaustion
CVE-2024-30255
CWE-400 Medium
No
No
1.26.8, 1.27.4, 1.28.2, 1.29.3 05.04.2024 SB2024040530
SB2024100412
SB2024100825
and 2 more
#VU86326 - NULL Pointer Dereference
CVE-2024-23327
CWE-476 Medium
No
No
1.26.7, 1.27.3, 1.28.1, 1.29.1 12.02.2024 SB2024021205
SB2024021206
SB2024021507
and 2 more
#VU86325 - Uncaught Exception
CVE-2024-23325
CWE-248 Medium
No
No
1.26.7, 1.27.3, 1.28.1, 1.29.1 12.02.2024 SB2024021205
SB2024021206
SB2024021507
and 2 more
#VU86324 - Improper Authentication
CVE-2024-23324
CWE-287 High
No
No
1.26.7, 1.27.3, 1.28.1, 1.29.1 12.02.2024 SB2024021205
SB2024021206
SB2024021507
and 2 more
#VU86323 - Inefficient CPU Computation
CVE-2024-23323
CWE-1176 Low
No
No
1.26.7, 1.27.3, 1.28.1, 1.29.1 12.02.2024 SB2024021205
SB2024021206
SB2024021507
and 2 more
#VU86322 - Use After Free
CVE-2024-23322
CWE-416 Medium
No
No
1.26.7, 1.27.3, 1.28.1, 1.29.1 12.02.2024 SB2024021205
SB2024021206
SB2024021507
and 2 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Public exploit available
Exploited
1.24.10, 1.25.10, 1.26.5, 1.27.1 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 652 more
#VU78682 - Use After Free
CVE-2023-35942
CWE-416 Medium
No
No
1.23.12, 1.24.10, 1.25.9, 1.26.4 26.07.2023 SB2023072633
SB2023072636
SB2023081405
and 3 more
#VU78681 - Use After Free
CVE-2023-35943
CWE-416 Medium
No
No
1.23.12, 1.24.10, 1.25.9, 1.26.4 26.07.2023 SB2023072633
SB2023072636
SB2023081403
and 3 more
#VU78679 - Improper input validation
CVE-2023-35944
CWE-20 High
No
No
1.23.12, 1.24.10, 1.25.9, 1.26.4 26.07.2023 SB2023072633
SB2023072636
SB2023081403
and 4 more
#VU78678 - Improper Encoding or Escaping of Output
CVE-2023-35941
CWE-116 High
No
No
1.23.12, 1.24.10, 1.25.9, 1.26.4 26.07.2023 SB2023072633
SB2023072636
SB2023081403
and 4 more
#VU78293 - Missing release of memory after effective lifetime
CVE-2023-35945
CWE-401 Medium
No
No
1.23.11, 1.24.9, 1.25.8, 1.26.3 16.07.2023 SB2023071620
SB2023080913
SB2023081405
and 18 more


Showing elements 21 - 40 out of 53