Known vulnerabilities in envoy - page 4

Software: envoy
Software CPE: cpe:2.3:a:cncf:envoy:*:*:*:*:*:*:*:*
Total vulnerabilities: 138
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting envoy envoy is affected by 138 known vulnerabilities: 17 high, 102 medium, 19 low Critical High Medium Low

Vulnerabilities (138)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93520 - Use After Free
CVE-2024-39305
CWE-416 Medium
No
No
1.27.7, 1.28.5, 1.29.7, 1.30.4 01.07.2024 SB2024070150
#VU91158 - Memory corruption
CVE-2024-34364
CWE-119 Medium
No
No
1.27.6, 1.28.4, 1.29.5, 1.30.2 05.06.2024 SB2024060518
SB2024060519
SB2024070220
#VU91157 - Use of Weak Credentials
CVE-2024-23326
CWE-1391 Medium
No
No
1.27.6, 1.28.4, 1.29.5, 1.30.2 05.06.2024 SB2024060518
SB2024060519
SB2024070220
and 1 more
#VU91156 - Use After Free
CVE-2024-34362
CWE-416 Medium
No
No
1.27.6, 1.28.4, 1.29.5, 1.30.2 05.06.2024 SB2024060518
SB2024060519
SB2024070220
#VU91155 - Uncaught Exception
CVE-2024-34363
CWE-248 Medium
No
No
1.28.4, 1.29.5, 1.30.2 05.06.2024 SB2024060518
SB2024060519
SB2024070220
#VU91154 - Use After Free
CVE-2024-32974
CWE-416 Medium
No
No
1.27.6, 1.28.4, 1.29.5, 1.30.2 05.06.2024 SB2024060518
SB2024060519
SB2024070220
#VU91153 - Integer underflow
CVE-2024-32975
CWE-191 Medium
No
No
1.27.6, 1.28.4, 1.29.5, 1.30.2 05.06.2024 SB2024060518
SB2024060519
SB2024070220
#VU91152 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-32976
CWE-835 Medium
No
No
1.27.6, 1.28.4, 1.29.5, 1.30.2 05.06.2024 SB2024060518
SB2024060519
SB2024070220
and 2 more
#VU88855 - Incorrect Check of Function Return Value
CVE-2024-32475
CWE-253 Medium
No
No
1.27.5, 1.28.3, 1.29.4, 1.30.1 19.04.2024 SB2024041931
SB2024052109
SB2024070220
and 2 more
#VU88181 - Resource exhaustion
CVE-2024-30255
CWE-400 Medium
No
No
1.26.8, 1.27.4, 1.28.2, 1.29.3 05.04.2024 SB2024040530
SB2024100412
SB2024100825
and 2 more
#VU88180 - Resource exhaustion
CVE-2024-27919
CWE-400 Medium
No
No
1.29.2 05.04.2024 SB2024040529
SB2024052109
SB2024100411
#VU86326 - NULL Pointer Dereference
CVE-2024-23327
CWE-476 Medium
No
No
1.26.7, 1.27.3, 1.28.1, 1.29.1 12.02.2024 SB2024021205
SB2024021206
SB2024021507
and 2 more
#VU86325 - Uncaught Exception
CVE-2024-23325
CWE-248 Medium
No
No
1.26.7, 1.27.3, 1.28.1, 1.29.1 12.02.2024 SB2024021205
SB2024021206
SB2024021507
and 2 more
#VU86324 - Improper Authentication
CVE-2024-23324
CWE-287 High
No
No
1.26.7, 1.27.3, 1.28.1, 1.29.1 12.02.2024 SB2024021205
SB2024021206
SB2024021507
and 2 more
#VU86323 - Inefficient CPU Computation
CVE-2024-23323
CWE-1176 Low
No
No
1.26.7, 1.27.3, 1.28.1, 1.29.1 12.02.2024 SB2024021205
SB2024021206
SB2024021507
and 2 more
#VU86322 - Use After Free
CVE-2024-23322
CWE-416 Medium
No
No
1.26.7, 1.27.3, 1.28.1, 1.29.1 12.02.2024 SB2024021205
SB2024021206
SB2024021507
and 2 more
#VU81728 - Resource exhaustion
CVE-2023-44487
CWE-400 High
Available
Exploited
1.24.10, 1.25.10, 1.26.5, 1.27.1 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 651 more
#VU78682 - Use After Free
CVE-2023-35942
CWE-416 Medium
No
No
1.23.12, 1.24.10, 1.25.9, 1.26.4 26.07.2023 SB2023072633
SB2023072636
SB2023081405
and 3 more
#VU78681 - Use After Free
CVE-2023-35943
CWE-416 Medium
No
No
1.23.12, 1.24.10, 1.25.9, 1.26.4 26.07.2023 SB2023072633
SB2023072636
SB2023081403
and 3 more
#VU78678 - Improper Encoding or Escaping of Output
CVE-2023-35941
CWE-116 High
No
No
1.23.12, 1.24.10, 1.25.9, 1.26.4 26.07.2023 SB2023072633
SB2023072636
SB2023081403
and 4 more


Showing elements 61 - 80 out of 138