Known vulnerabilities in envoy 1.25.2 - page 3
Software:
envoy
Version:
1.25.2
Software CPE:
cpe:2.3:a:cncf:envoy:*:*:*:*:*:*:*:*
Website:
https://www.cncf.io/
Total vulnerabilities:
53
Public exploits:
2
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.4
Vulnerabilities by Severity
1.36.10
1.37.6
1.38.4
1.39.1
1.39.0
1.38.3
1.37.5
1.36.9
1.35.13
1.38.2
1.37.4
1.36.8
1.35.12
1.38.1
1.37.3
1.36.7
1.35.11
1.38.0
1.37.2
1.36.6
1.35.10
1.34.14
1.37.1
1.36.5
1.35.9
1.34.13
1.37.0
1.36.4
1.35.8
1.34.12
1.33.14
1.36.3
1.35.7
1.34.11
1.33.13
1.36.2
1.35.6
1.34.10
1.33.12
1.34.9
1.35.5
1.36.1
1.33.11
1.36.0
1.35.4
1.34.8
1.33.10
1.32.13
1.35.3
1.34.7
1.33.9
1.32.12
1.35.2
1.34.6
1.33.8
1.32.11
1.35.1
1.34.5
1.33.7
1.32.10
1.34.4
1.33.6
1.32.9
1.35.0
1.34.3
1.33.5
1.32.8
1.31.10
1.34.2
1.33.4
1.32.7
1.31.9
1.34.1
1.33.3
1.32.6
1.31.8
1.34.0
1.33.2
1.32.5
1.31.7
1.30.11
1.33.1
1.32.4
1.31.6
1.30.10
1.33.0
1.32.3
1.31.5
1.30.9
1.29.12
1.32.2
1.31.4
1.30.8
1.29.11
1.32.1
1.31.3
1.30.7
1.29.10
1.32.0
1.31.2
1.30.6
1.29.9
1.28.7
1.31.1
1.30.5
1.29.8
1.28.6
1.31.0
1.30.4
1.29.7
1.28.5
1.27.7
1.30.3
1.29.6
1.28.4
1.29.5
1.30.2
1.27.6
1.30.1
1.29.4
1.28.3
1.27.5
1.30.0
1.29.3
1.28.2
1.27.4
1.26.8
1.29.2
1.29.1
1.28.1
1.27.3
1.26.7
1.29.0
1.28.0
1.27.2
1.26.6
1.25.11
1.24.12
1.25.10
1.26.5
1.27.1
1.24.11
1.27.0
1.25.9
1.26.4
1.24.10
1.23.12
1.26.3
1.25.8
1.24.9
1.23.11
1.26.2
1.25.7
1.24.8
1.23.10
1.26.1
1.25.6
1.24.7
1.23.9
1.26.0
1.25.5
1.24.6
1.23.8
1.22.11
1.25.4
1.24.5
1.23.7
1.22.10
1.25.3
1.24.4
1.23.6
1.22.9
1.25.2
1.24.3
1.23.5
1.22.8
1.22.7
1.23.4
1.24.2
1.25.1
1.25.0
1.24.1
1.23.3
1.22.6
1.21.6
1.24.0
1.23.2
1.23.1
1.22.5
1.22.4
1.22.3
1.21.5
1.20.7
1.23.0
1.20.6
1.20.5
1.21.4
1.22.2
1.22.1
1.21.3
1.20.4
1.19.5
1.21.2
1.20.3
1.19.4
1.22.0
1.21.1
1.20.2
1.19.3
1.18.6
1.21.0
1.20.1
1.20.0
1.16.5
1.17.4
1.18.4
1.19.1
1.19.0
1.15.5
1.16.4
1.17.3
1.18.3
1.18.2
1.14.7
1.15.4
1.16.3
1.17.2
1.18.0
1.18.1
1.17.1
1.13.8
1.17.0
1.16.2
1.13.7
1.14.6
1.15.3
1.16.1
1.16.0
1.15.2
1.13.6
1.12.7
1.13.5
1.14.5
1.15.1
1.12.6
1.13.4
1.14.4
1.15.0
1.12.5
1.13.3
1.14.3
1.12.4
1.13.2
1.14.2
1.14.1
1.14.0
1.13.1
1.13.0
1.12.3
1.12.2
1.12.1
1.12.0
1.11.2
1.11.1
1.11.0
1.10.0
1.9.1
1.9.0
1.8.0
1.7.1
1.7.0
1.6.0
1.5.0
1.4.0
1.3.0
1.2.0
1.1.0
1.0.0
Vulnerabilities (53)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU76426 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) CVE-2023-31147 |
CWE-338 | Medium | 1.23.10, 1.24.8, 1.25.7, 1.26.2 | 23.05.2023 |
SB2023052309 SB2023052312 SB2023053021 and 39 more |
||
| #VU76425 - Buffer Underwrite ('Buffer Underflow') CVE-2023-31130 |
CWE-124 | Low | 1.23.10, 1.24.8, 1.25.7, 1.26.2 | 23.05.2023 |
SB2023052309 SB2023052312 SB2023053021 and 55 more |
||
| #VU76424 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) CVE-2023-31124 |
CWE-338 | Medium | 1.23.10, 1.24.8, 1.25.7, 1.26.2 | 23.05.2023 |
SB2023052309 SB2023052312 SB2023053021 and 33 more |
||
| #VU76422 - Improper input validation CVE-2023-32067 |
CWE-20 | Medium | 1.23.10, 1.24.8, 1.25.7, 1.26.2 | 23.05.2023 |
SB2023052309 SB2023052312 SB2023053021 and 66 more |
||
| #VU75586 - Reliance on Undefined, Unspecified, or Implementation-Defined Behavior CVE-2023-30624 |
CWE-758 | Low | 1.23.10, 1.24.8, 1.25.7, 1.26.2 | 28.04.2023 |
SB2023042810 SB2023060840 SB202502194444 |
||
| #VU74480 - Improper input validation CVE-2023-27487 |
CWE-20 | High | 1.22.10, 1.23.7, 1.24.5, 1.25.4 | 05.04.2023 |
SB2023040516 SB2023040519 SB2023081407 and 1 more |
||
| #VU74477 - Improper input validation CVE-2023-27491 |
CWE-20 | Medium | 1.22.10, 1.23.7, 1.24.5, 1.25.4 | 05.04.2023 |
SB2023040516 SB2023040519 SB2023081407 and 1 more |
||
| #VU74476 - Allocation of Resources Without Limits or Throttling CVE-2023-27492 |
CWE-770 | Medium | 1.22.10, 1.23.7, 1.24.5, 1.25.4 | 05.04.2023 |
SB2023040516 SB2023040519 SB2023081407 and 1 more |
||
| #VU74475 - Improper input validation CVE-2023-27493 |
CWE-20 | High | 1.22.10, 1.23.7, 1.24.5, 1.25.4 | 05.04.2023 |
SB2023040516 SB2023040519 SB2023081407 and 1 more |
||
| #VU74474 - Improper input validation CVE-2023-27488 |
CWE-20 | Medium | 1.22.10, 1.23.7, 1.24.5, 1.25.4 | 05.04.2023 |
SB2023040516 SB2023040519 SB2023070307 and 2 more |
||
| #VU74473 - Improper input validation CVE-2023-27496 |
CWE-20 | Medium | 1.22.10, 1.23.7, 1.24.5, 1.25.4 | 05.04.2023 |
SB2023040516 SB2023040519 SB2023081407 and 1 more |
||
| #VU73808 - Improper input validation CVE-2023-27477 |
CWE-20 | Low | 1.25.3 | 20.03.2023 |
SB2023032006 SB2023032701 |
||
| #VU73803 - Out-of-bounds write CVE-2023-26489 |
CWE-787 | Medium | 1.25.3 | 20.03.2023 |
SB2023032006 SB2023032701 |
Showing elements 41 - 60 out of 53