Known vulnerabilities in envoy 1.25.2 - page 2
Software:
envoy
Version:
1.25.2
Software CPE:
cpe:2.3:a:cncf:envoy:*:*:*:*:*:*:*:*
Website:
https://www.cncf.io/
Total vulnerabilities:
53
Public exploits:
2
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.4
Vulnerabilities by Severity
1.36.10
1.37.6
1.38.4
1.39.1
1.39.0
1.38.3
1.37.5
1.36.9
1.35.13
1.38.2
1.37.4
1.36.8
1.35.12
1.38.1
1.37.3
1.36.7
1.35.11
1.38.0
1.37.2
1.36.6
1.35.10
1.34.14
1.37.1
1.36.5
1.35.9
1.34.13
1.37.0
1.36.4
1.35.8
1.34.12
1.33.14
1.36.3
1.35.7
1.34.11
1.33.13
1.36.2
1.35.6
1.34.10
1.33.12
1.34.9
1.35.5
1.36.1
1.33.11
1.36.0
1.35.4
1.34.8
1.33.10
1.32.13
1.35.3
1.34.7
1.33.9
1.32.12
1.35.2
1.34.6
1.33.8
1.32.11
1.35.1
1.34.5
1.33.7
1.32.10
1.34.4
1.33.6
1.32.9
1.35.0
1.34.3
1.33.5
1.32.8
1.31.10
1.34.2
1.33.4
1.32.7
1.31.9
1.34.1
1.33.3
1.32.6
1.31.8
1.34.0
1.33.2
1.32.5
1.31.7
1.30.11
1.33.1
1.32.4
1.31.6
1.30.10
1.33.0
1.32.3
1.31.5
1.30.9
1.29.12
1.32.2
1.31.4
1.30.8
1.29.11
1.32.1
1.31.3
1.30.7
1.29.10
1.32.0
1.31.2
1.30.6
1.29.9
1.28.7
1.31.1
1.30.5
1.29.8
1.28.6
1.31.0
1.30.4
1.29.7
1.28.5
1.27.7
1.30.3
1.29.6
1.28.4
1.29.5
1.30.2
1.27.6
1.30.1
1.29.4
1.28.3
1.27.5
1.30.0
1.29.3
1.28.2
1.27.4
1.26.8
1.29.2
1.29.1
1.28.1
1.27.3
1.26.7
1.29.0
1.28.0
1.27.2
1.26.6
1.25.11
1.24.12
1.25.10
1.26.5
1.27.1
1.24.11
1.27.0
1.25.9
1.26.4
1.24.10
1.23.12
1.26.3
1.25.8
1.24.9
1.23.11
1.26.2
1.25.7
1.24.8
1.23.10
1.26.1
1.25.6
1.24.7
1.23.9
1.26.0
1.25.5
1.24.6
1.23.8
1.22.11
1.25.4
1.24.5
1.23.7
1.22.10
1.25.3
1.24.4
1.23.6
1.22.9
1.25.2
1.24.3
1.23.5
1.22.8
1.22.7
1.23.4
1.24.2
1.25.1
1.25.0
1.24.1
1.23.3
1.22.6
1.21.6
1.24.0
1.23.2
1.23.1
1.22.5
1.22.4
1.22.3
1.21.5
1.20.7
1.23.0
1.20.6
1.20.5
1.21.4
1.22.2
1.22.1
1.21.3
1.20.4
1.19.5
1.21.2
1.20.3
1.19.4
1.22.0
1.21.1
1.20.2
1.19.3
1.18.6
1.21.0
1.20.1
1.20.0
1.16.5
1.17.4
1.18.4
1.19.1
1.19.0
1.15.5
1.16.4
1.17.3
1.18.3
1.18.2
1.14.7
1.15.4
1.16.3
1.17.2
1.18.0
1.18.1
1.17.1
1.13.8
1.17.0
1.16.2
1.13.7
1.14.6
1.15.3
1.16.1
1.16.0
1.15.2
1.13.6
1.12.7
1.13.5
1.14.5
1.15.1
1.12.6
1.13.4
1.14.4
1.15.0
1.12.5
1.13.3
1.14.3
1.12.4
1.13.2
1.14.2
1.14.1
1.14.0
1.13.1
1.13.0
1.12.3
1.12.2
1.12.1
1.12.0
1.11.2
1.11.1
1.11.0
1.10.0
1.9.1
1.9.0
1.8.0
1.7.1
1.7.0
1.6.0
1.5.0
1.4.0
1.3.0
1.2.0
1.1.0
1.0.0
Vulnerabilities (53)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU95131 - Out-of-bounds read CVE-2024-7264 |
CWE-125 | Medium | 1.28.6, 1.29.8, 1.30.5, 1.31.1 | 01.08.2024 |
SB2024080110 SB2024080117 SB20240805104 and 43 more |
||
| #VU91158 - Memory corruption CVE-2024-34364 |
CWE-119 | Medium | 1.27.6, 1.28.4, 1.29.5, 1.30.2 | 05.06.2024 |
SB2024060518 SB2024060519 SB2024070220 |
||
| #VU91157 - Use of Weak Credentials CVE-2024-23326 |
CWE-1391 | Medium | 1.27.6, 1.28.4, 1.29.5, 1.30.2 | 05.06.2024 |
SB2024060518 SB2024060519 SB2024070220 and 1 more |
||
| #VU91156 - Use After Free CVE-2024-34362 |
CWE-416 | Medium | 1.27.6, 1.28.4, 1.29.5, 1.30.2 | 05.06.2024 |
SB2024060518 SB2024060519 SB2024070220 |
||
| #VU91154 - Use After Free CVE-2024-32974 |
CWE-416 | Medium | 1.27.6, 1.28.4, 1.29.5, 1.30.2 | 05.06.2024 |
SB2024060518 SB2024060519 SB2024070220 |
||
| #VU91153 - Integer underflow CVE-2024-32975 |
CWE-191 | Medium | 1.27.6, 1.28.4, 1.29.5, 1.30.2 | 05.06.2024 |
SB2024060518 SB2024060519 SB2024070220 |
||
| #VU91152 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-32976 |
CWE-835 | Medium | 1.27.6, 1.28.4, 1.29.5, 1.30.2 | 05.06.2024 |
SB2024060518 SB2024060519 SB2024070220 and 2 more |
||
| #VU88855 - Incorrect Check of Function Return Value CVE-2024-32475 |
CWE-253 | Medium | 1.27.5, 1.28.3, 1.29.4, 1.30.1 | 19.04.2024 |
SB2024041931 SB2024052109 SB2024070220 and 2 more |
||
| #VU88181 - Resource exhaustion CVE-2024-30255 |
CWE-400 | Medium | 1.26.8, 1.27.4, 1.28.2, 1.29.3 | 05.04.2024 |
SB2024040530 SB2024100412 SB2024100825 and 2 more |
||
| #VU86326 - NULL Pointer Dereference CVE-2024-23327 |
CWE-476 | Medium | 1.26.7, 1.27.3, 1.28.1, 1.29.1 | 12.02.2024 |
SB2024021205 SB2024021206 SB2024021507 and 2 more |
||
| #VU86325 - Uncaught Exception CVE-2024-23325 |
CWE-248 | Medium | 1.26.7, 1.27.3, 1.28.1, 1.29.1 | 12.02.2024 |
SB2024021205 SB2024021206 SB2024021507 and 2 more |
||
| #VU86324 - Improper Authentication CVE-2024-23324 |
CWE-287 | High | 1.26.7, 1.27.3, 1.28.1, 1.29.1 | 12.02.2024 |
SB2024021205 SB2024021206 SB2024021507 and 2 more |
||
| #VU86323 - Inefficient CPU Computation CVE-2024-23323 |
CWE-1176 | Low | 1.26.7, 1.27.3, 1.28.1, 1.29.1 | 12.02.2024 |
SB2024021205 SB2024021206 SB2024021507 and 2 more |
||
| #VU86322 - Use After Free CVE-2024-23322 |
CWE-416 | Medium | 1.26.7, 1.27.3, 1.28.1, 1.29.1 | 12.02.2024 |
SB2024021205 SB2024021206 SB2024021507 and 2 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 1.24.10, 1.25.10, 1.26.5, 1.27.1 | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 652 more |
||
| #VU78682 - Use After Free CVE-2023-35942 |
CWE-416 | Medium | 1.23.12, 1.24.10, 1.25.9, 1.26.4 | 26.07.2023 |
SB2023072633 SB2023072636 SB2023081405 and 3 more |
||
| #VU78681 - Use After Free CVE-2023-35943 |
CWE-416 | Medium | 1.23.12, 1.24.10, 1.25.9, 1.26.4 | 26.07.2023 |
SB2023072633 SB2023072636 SB2023081403 and 3 more |
||
| #VU78679 - Improper input validation CVE-2023-35944 |
CWE-20 | High | 1.23.12, 1.24.10, 1.25.9, 1.26.4 | 26.07.2023 |
SB2023072633 SB2023072636 SB2023081403 and 4 more |
||
| #VU78678 - Improper Encoding or Escaping of Output CVE-2023-35941 |
CWE-116 | High | 1.23.12, 1.24.10, 1.25.9, 1.26.4 | 26.07.2023 |
SB2023072633 SB2023072636 SB2023081403 and 4 more |
||
| #VU78293 - Missing release of memory after effective lifetime CVE-2023-35945 |
CWE-401 | Medium | 1.23.11, 1.24.9, 1.25.8, 1.26.3 | 16.07.2023 |
SB2023071620 SB2023080913 SB2023081405 and 18 more |
Showing elements 21 - 40 out of 53