Known vulnerabilities in envoy - page 5

Software: envoy
Software CPE: cpe:2.3:a:cncf:envoy:*:*:*:*:*:*:*:*
Total vulnerabilities: 138
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting envoy envoy is affected by 138 known vulnerabilities: 17 high, 102 medium, 19 low Critical High Medium Low

Vulnerabilities (138)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78679 - Improper input validation
CVE-2023-35944
CWE-20 High
No
No
1.23.12, 1.24.10, 1.25.9, 1.26.4 26.07.2023 SB2023072633
SB2023072636
SB2023081403
and 4 more
#VU78293 - Missing release of memory after effective lifetime
CVE-2023-35945
CWE-401 Medium
No
No
1.23.11, 1.24.9, 1.25.8, 1.26.3 16.07.2023 SB2023071620
SB2023080913
SB2023081405
and 18 more
#VU76426 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2023-31147
CWE-338 Medium
No
No
1.23.10, 1.24.8, 1.25.7, 1.26.2 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 39 more
#VU76425 - Buffer Underwrite ('Buffer Underflow')
CVE-2023-31130
CWE-124 Low
No
No
1.23.10, 1.24.8, 1.25.7, 1.26.2 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 55 more
#VU76424 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2023-31124
CWE-338 Medium
No
No
1.23.10, 1.24.8, 1.25.7, 1.26.2 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 33 more
#VU76422 - Improper input validation
CVE-2023-32067
CWE-20 Medium
No
No
1.23.10, 1.24.8, 1.25.7, 1.26.2 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 66 more
#VU75586 - Reliance on Undefined, Unspecified, or Implementation-Defined Behavior
CVE-2023-30624
CWE-758 Low
No
No
1.23.10, 1.24.8, 1.25.7, 1.26.2 28.04.2023 SB2023042810
SB2023060840
SB202502194444
#VU74480 - Improper input validation
CVE-2023-27487
CWE-20 High
No
No
1.22.10, 1.23.7, 1.24.5, 1.25.4 05.04.2023 SB2023040516
SB2023040519
SB2023081407
and 1 more
#VU74477 - Improper input validation
CVE-2023-27491
CWE-20 Medium
No
No
1.22.10, 1.23.7, 1.24.5, 1.25.4 05.04.2023 SB2023040516
SB2023040519
SB2023081407
and 1 more
#VU74476 - Allocation of Resources Without Limits or Throttling
CVE-2023-27492
CWE-770 Medium
No
No
1.22.10, 1.23.7, 1.24.5, 1.25.4 05.04.2023 SB2023040516
SB2023040519
SB2023081407
and 1 more
#VU74475 - Improper input validation
CVE-2023-27493
CWE-20 High
No
No
1.22.10, 1.23.7, 1.24.5, 1.25.4 05.04.2023 SB2023040516
SB2023040519
SB2023081407
and 1 more
#VU74474 - Improper input validation
CVE-2023-27488
CWE-20 Medium
No
No
1.22.10, 1.23.7, 1.24.5, 1.25.4 05.04.2023 SB2023040516
SB2023040519
SB2023070307
and 2 more
#VU74473 - Improper input validation
CVE-2023-27496
CWE-20 Medium
No
No
1.22.10, 1.23.7, 1.24.5, 1.25.4 05.04.2023 SB2023040516
SB2023040519
SB2023081407
and 1 more
#VU73808 - Improper input validation
CVE-2023-27477
CWE-20 Low
No
No
1.25.3 20.03.2023 SB2023032006
SB2023032701
#VU73803 - Out-of-bounds write
CVE-2023-26489
CWE-787 Medium
Available
No
1.25.3 20.03.2023 SB2023032006
SB2023032701
#VU64160 - Use After Free
CVE-2022-29227
CWE-416 Medium
No
No
1.22.1 10.06.2022 SB2022061010
#VU64158 - Memory corruption
CVE-2022-29228
CWE-119 Medium
No
No
1.22.1 10.06.2022 SB2022061010
SB2022061422
SB2022070541
#VU64157 - Incorrect Implementation of Authentication Algorithm
CVE-2022-29226
CWE-303 High
No
No
1.22.1 10.06.2022 SB2022061010
SB2022061422
SB2022070541
#VU64155 - NULL Pointer Dereference
CVE-2022-29224
CWE-476 Medium
No
No
1.22.1 10.06.2022 SB2022061010
SB2022061332
SB2022061422
and 1 more
#VU64154 - Resource exhaustion
CVE-2022-29225
CWE-400 Medium
No
No
1.22.1 10.06.2022 SB2022061010
SB2022061332
SB2022061422
and 1 more


Showing elements 81 - 100 out of 138