Known vulnerabilities in envoy - page 6

Software: envoy
Software CPE: cpe:2.3:a:cncf:envoy:*:*:*:*:*:*:*:*
Total vulnerabilities: 138
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting envoy envoy is affected by 138 known vulnerabilities: 17 high, 102 medium, 19 low Critical High Medium Low

Vulnerabilities (138)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145836 - Improper Handling of Exceptional Conditions
CVE-2022-23606
CWE-755 Low
No
No
1.20.2, 1.21.1 22.02.2022 SB2022022248
#VU145837 - Improper Certificate Validation
CVE-2022-21657
CWE-295 Low
No
No
1.18.6, 1.19.3, 1.20.2 22.02.2022 SB2022022248
#VU145838 - Improper Certificate Validation
CVE-2022-21656
CWE-295 Low
No
No
1.20.2 22.02.2022 SB2022022248
#VU145839 - Always-Incorrect Control Flow Implementation
CVE-2022-21655
CWE-670 Medium
No
No
1.18.6, 1.19.3, 1.20.2, 1.21.1 22.02.2022 SB2022022248
#VU145840 - Configuration
CVE-2022-21654
CWE-16 Low
No
No
1.18.6, 1.19.3, 1.20.2, 1.21.1 22.02.2022 SB2022022248
#VU145848 - Use After Free
CVE-2021-43826
CWE-416 Medium
No
No
1.18.6, 1.19.3, 1.20.2, 1.21.1 22.02.2022 SB2022022248
#VU145847 - Use After Free
CVE-2021-43825
CWE-416 Medium
No
No
1.18.6, 1.19.3, 1.20.2, 1.21.1 22.02.2022 SB2022022248
#VU145846 - NULL Pointer Dereference
CVE-2021-43824
CWE-476 Medium
No
No
1.18.6, 1.19.3, 1.20.2, 1.21.1 22.02.2022 SB2022022248
#VU56149 - Exposure of sensitive information to an unauthorized actor
CVE-2021-32779
CWE-200 High
No
No
1.16.5, 1.17.4, 1.18.4, 1.19.1 30.08.2021 SB2021083002
SB2021083003
SB2021082532
and 1 more
#VU56148 - Improper Check for Unusual or Exceptional Conditions
CVE-2021-32780
CWE-754 Medium
No
No
1.18.4, 1.19.1 30.08.2021 SB2021083002
SB2021083003
#VU56147 - Excessive Iteration
CVE-2021-32778
CWE-834 Medium
No
No
1.16.5, 1.17.4, 1.18.4, 1.19.1 30.08.2021 SB2021083002
SB2021083003
SB2021120816
#VU56107 - Use After Free
CVE-2021-32781
CWE-416 Medium
No
No
1.16.5, 1.17.4, 1.18.4, 1.19.1 26.08.2021 SB2021083002
SB2021083003
SB2021082532
and 1 more
#VU56106 - Improper Authorization
CVE-2021-32777
CWE-285 Medium
No
No
1.16.5, 1.17.4, 1.18.4, 1.19.1 26.08.2021 SB2021083002
SB2021083003
SB2021082532
and 1 more
#VU145849 - Improper input validation
CVE-2021-29492
CWE-20 Medium
No
No
1.15.5, 1.16.4, 1.17.3, 1.18.3 11.05.2021 SB2021051176
#VU145850 - Integer overflow
CVE-2021-28682
CWE-190 Medium
No
No
1.14.7, 1.15.4, 1.16.3, 1.17.2, 1.18.0 16.04.2021 SB2021041642
#VU145851 - Uncaught Exception
CVE-2021-28683
CWE-248 Medium
No
No
1.16.3, 1.17.2, 1.18.0 16.04.2021 SB2021041642
#VU145852 - Reachable Assertion
CVE-2021-29258
CWE-617 Medium
No
No
1.14.7, 1.15.4, 1.16.3, 1.17.2, 1.18.0 16.04.2021 SB2021041642
#VU145853 - Improper Access Control
CVE-2021-21378
CWE-284 High
No
No
1.17.1 09.03.2021 SB2021030980
#VU145855 - Improper input validation
CWE-20 Medium
No
No
1.16.1 17.12.2020 SB2020121750
#VU145854 - Improper input validation
CWE-20 Medium
No
No
1.13.7, 1.14.6, 1.15.3, 1.16.1 17.12.2020 SB2020121750


Showing elements 101 - 120 out of 138