Known vulnerabilities in envoy - page 6
Software:
envoy
Software CPE:
cpe:2.3:a:cncf:envoy:*:*:*:*:*:*:*:*
Website:
https://www.cncf.io/
Total vulnerabilities:
140
Public exploits:
3
Known exploited (KEV):
1
Breakdown by Severity Chart
1.40.0
1.36.13
1.37.9
1.38.7
1.39.4
1.38.6
1.37.8
1.36.12
1.39.3
1.36.11
1.37.7
1.38.5
1.39.2
1.36.10
1.37.6
1.38.4
1.39.1
1.39.0
1.38.3
1.37.5
1.36.9
1.35.13
1.38.2
1.37.4
1.36.8
1.35.12
1.38.1
1.37.3
1.36.7
1.35.11
1.38.0
1.37.2
1.36.6
1.35.10
1.34.14
1.37.1
1.36.5
1.35.9
1.34.13
1.37.0
1.36.4
1.35.8
1.34.12
1.33.14
1.36.3
1.35.7
1.34.11
1.33.13
1.36.2
1.35.6
1.34.10
1.33.12
1.34.9
1.35.5
1.36.1
1.33.11
1.36.0
1.35.4
1.34.8
1.33.10
1.32.13
1.35.3
1.34.7
1.33.9
1.32.12
1.35.2
1.34.6
1.33.8
1.32.11
1.35.1
1.34.5
1.33.7
1.32.10
1.34.4
1.33.6
1.32.9
1.35.0
1.34.3
1.33.5
1.32.8
1.31.10
1.34.2
1.33.4
1.32.7
1.31.9
1.34.1
1.33.3
1.32.6
1.31.8
1.34.0
1.33.2
1.32.5
1.31.7
1.30.11
1.33.1
1.32.4
1.31.6
1.30.10
1.33.0
1.32.3
1.31.5
1.30.9
1.29.12
1.32.2
1.31.4
1.30.8
1.29.11
1.32.1
1.31.3
1.30.7
1.29.10
1.32.0
1.31.2
1.30.6
1.29.9
1.28.7
1.31.1
1.30.5
1.29.8
1.28.6
1.31.0
1.30.4
1.29.7
1.28.5
1.27.7
1.30.3
1.29.6
1.28.4
1.29.5
1.30.2
1.27.6
1.30.1
1.29.4
1.28.3
1.27.5
1.30.0
1.29.3
1.28.2
1.27.4
1.26.8
1.29.2
1.29.1
1.28.1
1.27.3
1.26.7
1.29.0
1.28.0
1.27.2
1.26.6
1.25.11
1.24.12
1.25.10
1.26.5
1.27.1
1.24.11
1.27.0
1.25.9
1.26.4
1.24.10
1.23.12
1.26.3
1.25.8
1.24.9
1.23.11
1.26.2
1.25.7
1.24.8
1.23.10
1.26.1
1.25.6
1.24.7
1.23.9
1.26.0
1.25.5
1.24.6
1.23.8
1.22.11
1.25.4
1.24.5
1.23.7
1.22.10
1.25.3
1.24.4
1.23.6
1.22.9
1.25.2
1.24.3
1.23.5
1.22.8
1.22.7
1.23.4
1.24.2
1.25.1
1.25.0
1.24.1
1.23.3
1.22.6
1.21.6
1.24.0
1.23.2
1.23.1
1.22.5
1.22.4
1.22.3
1.21.5
1.20.7
1.23.0
1.20.6
1.20.5
1.21.4
1.22.2
1.22.1
1.21.3
1.20.4
1.19.5
1.21.2
1.20.3
1.19.4
1.22.0
1.21.1
1.20.2
1.19.3
1.18.6
1.21.0
1.20.1
1.20.0
1.16.5
1.17.4
1.18.4
1.19.1
1.19.0
1.15.5
1.16.4
1.17.3
1.18.3
1.18.2
1.14.7
1.15.4
1.16.3
1.17.2
1.18.0
1.18.1
1.17.1
1.13.8
1.17.0
1.16.2
1.13.7
1.14.6
1.15.3
1.16.1
1.16.0
1.15.2
1.13.6
1.12.7
1.13.5
1.14.5
1.15.1
1.12.6
1.13.4
1.14.4
1.15.0
1.12.5
1.13.3
1.14.3
1.12.4
1.13.2
1.14.2
1.14.1
1.14.0
1.13.1
1.13.0
1.12.3
1.12.2
1.12.1
1.12.0
1.11.2
1.11.1
1.11.0
1.10.0
1.9.1
1.9.0
1.8.0
1.7.1
1.7.0
1.6.0
1.5.0
1.4.0
1.3.0
1.2.0
1.1.0
1.0.0
Vulnerabilities (140)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU78682 - Use After Free CVE-2023-35942 |
CWE-416 | Medium | 1.23.12, 1.24.10, 1.25.9, 1.26.4 | 26.07.2023 |
SB2023072633 SB2023072636 SB2023081405 and 3 more |
||
| #VU78681 - Use After Free CVE-2023-35943 |
CWE-416 | Medium | 1.23.12, 1.24.10, 1.25.9, 1.26.4 | 26.07.2023 |
SB2023072633 SB2023072636 SB2023081403 and 3 more |
||
| #VU78679 - Improper input validation CVE-2023-35944 |
CWE-20 | High | 1.23.12, 1.24.10, 1.25.9, 1.26.4 | 26.07.2023 |
SB2023072633 SB2023072636 SB2023081403 and 4 more |
||
| #VU78678 - Improper Encoding or Escaping of Output CVE-2023-35941 |
CWE-116 | High | 1.23.12, 1.24.10, 1.25.9, 1.26.4 | 26.07.2023 |
SB2023072633 SB2023072636 SB2023081403 and 4 more |
||
| #VU78293 - Missing release of memory after effective lifetime CVE-2023-35945 |
CWE-401 | Medium | 1.23.11, 1.24.9, 1.25.8, 1.26.3 | 16.07.2023 |
SB2023071620 SB2023080913 SB2023081405 and 18 more |
||
| #VU76426 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) CVE-2023-31147 |
CWE-338 | Medium | 1.23.10, 1.24.8, 1.25.7, 1.26.2 | 23.05.2023 |
SB2023052309 SB2023052312 SB2023053021 and 39 more |
||
| #VU76425 - Buffer Underwrite ('Buffer Underflow') CVE-2023-31130 |
CWE-124 | Low | 1.23.10, 1.24.8, 1.25.7, 1.26.2 | 23.05.2023 |
SB2023052309 SB2023052312 SB2023053021 and 55 more |
||
| #VU76424 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) CVE-2023-31124 |
CWE-338 | Medium | 1.23.10, 1.24.8, 1.25.7, 1.26.2 | 23.05.2023 |
SB2023052309 SB2023052312 SB2023053021 and 33 more |
||
| #VU76422 - Improper input validation CVE-2023-32067 |
CWE-20 | Medium | 1.23.10, 1.24.8, 1.25.7, 1.26.2 | 23.05.2023 |
SB2023052309 SB2023052312 SB2023053021 and 66 more |
||
| #VU75586 - Reliance on Undefined, Unspecified, or Implementation-Defined Behavior CVE-2023-30624 |
CWE-758 | Low | 1.23.10, 1.24.8, 1.25.7, 1.26.2 | 28.04.2023 |
SB2023042810 SB2023060840 SB202502194444 |
||
| #VU74480 - Improper input validation CVE-2023-27487 |
CWE-20 | High | 1.22.10, 1.23.7, 1.24.5, 1.25.4 | 05.04.2023 |
SB2023040516 SB2023040519 SB2023081407 and 1 more |
||
| #VU74477 - Improper input validation CVE-2023-27491 |
CWE-20 | Medium | 1.22.10, 1.23.7, 1.24.5, 1.25.4 | 05.04.2023 |
SB2023040516 SB2023040519 SB2023081407 and 1 more |
||
| #VU74476 - Allocation of Resources Without Limits or Throttling CVE-2023-27492 |
CWE-770 | Medium | 1.22.10, 1.23.7, 1.24.5, 1.25.4 | 05.04.2023 |
SB2023040516 SB2023040519 SB2023081407 and 1 more |
||
| #VU74475 - Improper input validation CVE-2023-27493 |
CWE-20 | High | 1.22.10, 1.23.7, 1.24.5, 1.25.4 | 05.04.2023 |
SB2023040516 SB2023040519 SB2023081407 and 1 more |
||
| #VU74474 - Improper input validation CVE-2023-27488 |
CWE-20 | Medium | 1.22.10, 1.23.7, 1.24.5, 1.25.4 | 05.04.2023 |
SB2023040516 SB2023040519 SB2023070307 and 2 more |
||
| #VU74473 - Improper input validation CVE-2023-27496 |
CWE-20 | Medium | 1.22.10, 1.23.7, 1.24.5, 1.25.4 | 05.04.2023 |
SB2023040516 SB2023040519 SB2023081407 and 1 more |
||
| #VU73808 - Improper input validation CVE-2023-27477 |
CWE-20 | Low | 1.25.3 | 20.03.2023 |
SB2023032006 SB2023032701 |
||
| #VU73803 - Out-of-bounds write CVE-2023-26489 |
CWE-787 | Medium | 1.25.3 | 20.03.2023 |
SB2023032006 SB2023032701 |
||
| #VU64160 - Use After Free CVE-2022-29227 |
CWE-416 | Medium | 1.22.1 | 10.06.2022 |
SB2022061010 |
||
| #VU64154 - Resource exhaustion CVE-2022-29225 |
CWE-400 | Medium | 1.22.1 | 10.06.2022 |
SB2022061010 SB2022061332 SB2022061422 and 1 more |
Showing elements 101 - 120 out of 140