Known vulnerabilities in envoy - page 6
Software:
envoy
Software CPE:
cpe:2.3:a:cncf:envoy:*:*:*:*:*:*:*:*
Website:
https://www.cncf.io/
Total vulnerabilities:
138
Public exploits:
3
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
1.36.10
1.37.6
1.38.4
1.39.1
1.39.0
1.38.3
1.37.5
1.36.9
1.35.13
1.38.2
1.37.4
1.36.8
1.35.12
1.38.1
1.37.3
1.36.7
1.35.11
1.38.0
1.37.2
1.36.6
1.35.10
1.34.14
1.37.1
1.36.5
1.35.9
1.34.13
1.37.0
1.36.4
1.35.8
1.34.12
1.33.14
1.36.3
1.35.7
1.34.11
1.33.13
1.36.2
1.35.6
1.34.10
1.33.12
1.34.9
1.35.5
1.36.1
1.33.11
1.36.0
1.35.4
1.34.8
1.33.10
1.32.13
1.35.3
1.34.7
1.33.9
1.32.12
1.35.2
1.34.6
1.33.8
1.32.11
1.35.1
1.34.5
1.33.7
1.32.10
1.34.4
1.33.6
1.32.9
1.35.0
1.34.3
1.33.5
1.32.8
1.31.10
1.34.2
1.33.4
1.32.7
1.31.9
1.34.1
1.33.3
1.32.6
1.31.8
1.34.0
1.33.2
1.32.5
1.31.7
1.30.11
1.33.1
1.32.4
1.31.6
1.30.10
1.33.0
1.32.3
1.31.5
1.30.9
1.29.12
1.32.2
1.31.4
1.30.8
1.29.11
1.32.1
1.31.3
1.30.7
1.29.10
1.32.0
1.31.2
1.30.6
1.29.9
1.28.7
1.31.1
1.30.5
1.29.8
1.28.6
1.31.0
1.30.4
1.29.7
1.28.5
1.27.7
1.30.3
1.29.6
1.28.4
1.29.5
1.30.2
1.27.6
1.30.1
1.29.4
1.28.3
1.27.5
1.30.0
1.29.3
1.28.2
1.27.4
1.26.8
1.29.2
1.29.1
1.28.1
1.27.3
1.26.7
1.29.0
1.28.0
1.27.2
1.26.6
1.25.11
1.24.12
1.25.10
1.26.5
1.27.1
1.24.11
1.27.0
1.25.9
1.26.4
1.24.10
1.23.12
1.26.3
1.25.8
1.24.9
1.23.11
1.26.2
1.25.7
1.24.8
1.23.10
1.26.1
1.25.6
1.24.7
1.23.9
1.26.0
1.25.5
1.24.6
1.23.8
1.22.11
1.25.4
1.24.5
1.23.7
1.22.10
1.25.3
1.24.4
1.23.6
1.22.9
1.25.2
1.24.3
1.23.5
1.22.8
1.22.7
1.23.4
1.24.2
1.25.1
1.25.0
1.24.1
1.23.3
1.22.6
1.21.6
1.24.0
1.23.2
1.23.1
1.22.5
1.22.4
1.22.3
1.21.5
1.20.7
1.23.0
1.20.6
1.20.5
1.21.4
1.22.2
1.22.1
1.21.3
1.20.4
1.19.5
1.21.2
1.20.3
1.19.4
1.22.0
1.21.1
1.20.2
1.19.3
1.18.6
1.21.0
1.20.1
1.20.0
1.16.5
1.17.4
1.18.4
1.19.1
1.19.0
1.15.5
1.16.4
1.17.3
1.18.3
1.18.2
1.14.7
1.15.4
1.16.3
1.17.2
1.18.0
1.18.1
1.17.1
1.13.8
1.17.0
1.16.2
1.13.7
1.14.6
1.15.3
1.16.1
1.16.0
1.15.2
1.13.6
1.12.7
1.13.5
1.14.5
1.15.1
1.12.6
1.13.4
1.14.4
1.15.0
1.12.5
1.13.3
1.14.3
1.12.4
1.13.2
1.14.2
1.14.1
1.14.0
1.13.1
1.13.0
1.12.3
1.12.2
1.12.1
1.12.0
1.11.2
1.11.1
1.11.0
1.10.0
1.9.1
1.9.0
1.8.0
1.7.1
1.7.0
1.6.0
1.5.0
1.4.0
1.3.0
1.2.0
1.1.0
1.0.0
Vulnerabilities (138)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU145836 - Improper Handling of Exceptional Conditions CVE-2022-23606 |
CWE-755 | Low | 1.20.2, 1.21.1 | 22.02.2022 |
SB2022022248 |
||
| #VU145837 - Improper Certificate Validation CVE-2022-21657 |
CWE-295 | Low | 1.18.6, 1.19.3, 1.20.2 | 22.02.2022 |
SB2022022248 |
||
| #VU145838 - Improper Certificate Validation CVE-2022-21656 |
CWE-295 | Low | 1.20.2 | 22.02.2022 |
SB2022022248 |
||
| #VU145839 - Always-Incorrect Control Flow Implementation CVE-2022-21655 |
CWE-670 | Medium | 1.18.6, 1.19.3, 1.20.2, 1.21.1 | 22.02.2022 |
SB2022022248 |
||
| #VU145840 - Configuration CVE-2022-21654 |
CWE-16 | Low | 1.18.6, 1.19.3, 1.20.2, 1.21.1 | 22.02.2022 |
SB2022022248 |
||
| #VU145848 - Use After Free CVE-2021-43826 |
CWE-416 | Medium | 1.18.6, 1.19.3, 1.20.2, 1.21.1 | 22.02.2022 |
SB2022022248 |
||
| #VU145847 - Use After Free CVE-2021-43825 |
CWE-416 | Medium | 1.18.6, 1.19.3, 1.20.2, 1.21.1 | 22.02.2022 |
SB2022022248 |
||
| #VU145846 - NULL Pointer Dereference CVE-2021-43824 |
CWE-476 | Medium | 1.18.6, 1.19.3, 1.20.2, 1.21.1 | 22.02.2022 |
SB2022022248 |
||
| #VU56149 - Exposure of sensitive information to an unauthorized actor CVE-2021-32779 |
CWE-200 | High | 1.16.5, 1.17.4, 1.18.4, 1.19.1 | 30.08.2021 |
SB2021083002 SB2021083003 SB2021082532 and 1 more |
||
| #VU56148 - Improper Check for Unusual or Exceptional Conditions CVE-2021-32780 |
CWE-754 | Medium | 1.18.4, 1.19.1 | 30.08.2021 |
SB2021083002 SB2021083003 |
||
| #VU56147 - Excessive Iteration CVE-2021-32778 |
CWE-834 | Medium | 1.16.5, 1.17.4, 1.18.4, 1.19.1 | 30.08.2021 |
SB2021083002 SB2021083003 SB2021120816 |
||
| #VU56107 - Use After Free CVE-2021-32781 |
CWE-416 | Medium | 1.16.5, 1.17.4, 1.18.4, 1.19.1 | 26.08.2021 |
SB2021083002 SB2021083003 SB2021082532 and 1 more |
||
| #VU56106 - Improper Authorization CVE-2021-32777 |
CWE-285 | Medium | 1.16.5, 1.17.4, 1.18.4, 1.19.1 | 26.08.2021 |
SB2021083002 SB2021083003 SB2021082532 and 1 more |
||
| #VU145849 - Improper input validation CVE-2021-29492 |
CWE-20 | Medium | 1.15.5, 1.16.4, 1.17.3, 1.18.3 | 11.05.2021 |
SB2021051176 |
||
| #VU145850 - Integer overflow CVE-2021-28682 |
CWE-190 | Medium | 1.14.7, 1.15.4, 1.16.3, 1.17.2, 1.18.0 | 16.04.2021 |
SB2021041642 |
||
| #VU145851 - Uncaught Exception CVE-2021-28683 |
CWE-248 | Medium | 1.16.3, 1.17.2, 1.18.0 | 16.04.2021 |
SB2021041642 |
||
| #VU145852 - Reachable Assertion CVE-2021-29258 |
CWE-617 | Medium | 1.14.7, 1.15.4, 1.16.3, 1.17.2, 1.18.0 | 16.04.2021 |
SB2021041642 |
||
| #VU145853 - Improper Access Control CVE-2021-21378 |
CWE-284 | High | 1.17.1 | 09.03.2021 |
SB2021030980 |
||
| #VU145855 - Improper input validation |
CWE-20 | Medium | 1.16.1 | 17.12.2020 |
SB2020121750 |
||
| #VU145854 - Improper input validation |
CWE-20 | Medium | 1.13.7, 1.14.6, 1.15.3, 1.16.1 | 17.12.2020 |
SB2020121750 |
Showing elements 101 - 120 out of 138