Known vulnerabilities in envoy - page 7

Software: envoy
Software CPE: cpe:2.3:a:cncf:envoy:*:*:*:*:*:*:*:*
Total vulnerabilities: 140
Public exploits: 3
Known exploited (KEV): 1

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting envoy envoy is affected by 140 known vulnerabilities: 17 high, 103 medium, 20 low Critical High Medium Low

Vulnerabilities (140)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153340 - NULL Pointer Dereference
CWE-476 Medium
No
No
1.36.12, 1.37.8, 1.38.6, 1.39.3 06.10.2026 SB2026100646
#VU153339 - NULL Pointer Dereference
CWE-476 Low
No
No
1.36.12, 1.37.8, 1.38.6, 1.39.3 06.10.2026 SB2026100646
#VU64158 - Memory corruption
CVE-2022-29228
CWE-119 Medium
No
No
1.22.1 10.06.2022 SB2022061010
SB2022061422
SB2022070541
#VU64157 - Incorrect Implementation of Authentication Algorithm
CVE-2022-29226
CWE-303 High
No
No
1.22.1 10.06.2022 SB2022061010
SB2022061422
SB2022070541
#VU64155 - NULL Pointer Dereference
CVE-2022-29224
CWE-476 Medium
No
No
1.22.1 10.06.2022 SB2022061010
SB2022061332
SB2022061422
and 1 more
#VU56149 - Exposure of sensitive information to an unauthorized actor
CVE-2021-32779
CWE-200 High
No
No
1.16.5, 1.17.4, 1.18.4, 1.19.1 30.08.2021 SB2021083002
SB2021083003
SB2021082532
and 1 more
#VU56148 - Improper Check for Unusual or Exceptional Conditions
CVE-2021-32780
CWE-754 Medium
No
No
1.18.4, 1.19.1 30.08.2021 SB2021083002
SB2021083003
#VU56147 - Excessive Iteration
CVE-2021-32778
CWE-834 Medium
No
No
1.16.5, 1.17.4, 1.18.4, 1.19.1 30.08.2021 SB2021083002
SB2021083003
SB2021120816
#VU56107 - Use After Free
CVE-2021-32781
CWE-416 Medium
No
No
1.16.5, 1.17.4, 1.18.4, 1.19.1 26.08.2021 SB2021083002
SB2021083003
SB2021082532
and 1 more
#VU56106 - Improper Authorization
CVE-2021-32777
CWE-285 Medium
No
No
1.16.5, 1.17.4, 1.18.4, 1.19.1 26.08.2021 SB2021083002
SB2021083003
SB2021082532
and 1 more
#VU34154 - Origin Validation Error
CVE-2020-15104
CWE-346 Medium
No
No
1.14.4 15.07.2020 SB2020071540
#VU34180 - Memory corruption
CVE-2020-12604
CWE-119 Medium
No
No
- 01.07.2020 SB2020070147
#VU34181 - Resource exhaustion
CVE-2020-12605
CWE-400 Medium
No
No
- 01.07.2020 SB2020070147
#VU34182 - Resource exhaustion
CVE-2020-12603
CWE-400 Medium
No
No
- 01.07.2020 SB2020070147
#VU25838 - Improper Access Control
CVE-2020-8664
CWE-284 High
No
No
1.12.3, 1.13.1 09.03.2020 SB2020030913
SB2020030524
#VU25837 - Resource exhaustion
CVE-2020-8661
CWE-400 Medium
No
No
1.12.3, 1.13.1 09.03.2020 SB2020030913
SB2020030524
#VU25836 - Improper Access Control
CVE-2020-8660
CWE-284 High
No
No
1.12.3, 1.13.1 09.03.2020 SB2020030913
SB2020030524
#VU25835 - Resource exhaustion
CVE-2020-8659
CWE-400 Medium
No
No
1.12.3, 1.13.1 09.03.2020 SB2020030913
SB2020030524
#VU35101 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-18836
CWE-835 Medium
No
No
- 11.11.2019 SB2019111120
#VU35171 - Resource exhaustion
CVE-2019-15226
CWE-400 Medium
No
No
- 09.10.2019 SB2019100962


Showing elements 121 - 140 out of 140