Known vulnerabilities in envoy 1.25.2 - page 3

Software: envoy
Version: 1.25.2
Software CPE: cpe:2.3:a:cncf:envoy:*:*:*:*:*:*:*:*
Total vulnerabilities: 53
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting envoy version 1.25.2 envoy 1.25.2 is affected by 53 vulnerabilities: 7 high, 41 medium, 5 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU76426 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2023-31147
CWE-338 Medium
No
No
1.23.10, 1.24.8, 1.25.7, 1.26.2 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 39 more
#VU76425 - Buffer Underwrite ('Buffer Underflow')
CVE-2023-31130
CWE-124 Low
No
No
1.23.10, 1.24.8, 1.25.7, 1.26.2 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 55 more
#VU76424 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2023-31124
CWE-338 Medium
No
No
1.23.10, 1.24.8, 1.25.7, 1.26.2 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 33 more
#VU76422 - Improper input validation
CVE-2023-32067
CWE-20 Medium
No
No
1.23.10, 1.24.8, 1.25.7, 1.26.2 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 66 more
#VU75586 - Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
CVE-2023-30624
CWE-758 Low
No
No
1.23.10, 1.24.8, 1.25.7, 1.26.2 28.04.2023 SB2023042810
SB2023060840
SB202502194444
#VU74480 - Improper input validation
CVE-2023-27487
CWE-20 High
No
No
1.22.10, 1.23.7, 1.24.5, 1.25.4 05.04.2023 SB2023040516
SB2023040519
SB2023081407
and 1 more
#VU74477 - Improper input validation
CVE-2023-27491
CWE-20 Medium
No
No
1.22.10, 1.23.7, 1.24.5, 1.25.4 05.04.2023 SB2023040516
SB2023040519
SB2023081407
and 1 more
#VU74476 - Allocation of Resources Without Limits or Throttling
CVE-2023-27492
CWE-770 Medium
No
No
1.22.10, 1.23.7, 1.24.5, 1.25.4 05.04.2023 SB2023040516
SB2023040519
SB2023081407
and 1 more
#VU74475 - Improper input validation
CVE-2023-27493
CWE-20 High
No
No
1.22.10, 1.23.7, 1.24.5, 1.25.4 05.04.2023 SB2023040516
SB2023040519
SB2023081407
and 1 more
#VU74474 - Improper input validation
CVE-2023-27488
CWE-20 Medium
No
No
1.22.10, 1.23.7, 1.24.5, 1.25.4 05.04.2023 SB2023040516
SB2023040519
SB2023070307
and 2 more
#VU74473 - Improper input validation
CVE-2023-27496
CWE-20 Medium
No
No
1.22.10, 1.23.7, 1.24.5, 1.25.4 05.04.2023 SB2023040516
SB2023040519
SB2023081407
and 1 more
#VU73808 - Improper input validation
CVE-2023-27477
CWE-20 Low
No
No
1.25.3 20.03.2023 SB2023032006
SB2023032701
#VU73803 - Out-of-bounds write
CVE-2023-26489
CWE-787 Medium
Public exploit available
No
1.25.3 20.03.2023 SB2023032006
SB2023032701


Showing elements 41 - 60 out of 53