Known vulnerabilities in envoy - page 7

Software: envoy
Software CPE: cpe:2.3:a:cncf:envoy:*:*:*:*:*:*:*:*
Total vulnerabilities: 138
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting envoy envoy is affected by 138 known vulnerabilities: 17 high, 102 medium, 19 low Critical High Medium Low

Vulnerabilities (138)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU145856 - Improper input validation
CVE-2020-25017
CWE-20 Medium
No
No
1.12.7, 1.13.5, 1.14.5, 1.15.1 29.09.2020 SB2020092920
#VU34154 - Origin Validation Error
CVE-2020-15104
CWE-346 Medium
No
No
1.14.4 15.07.2020 SB2020071540
#VU34180 - Memory corruption
CVE-2020-12604
CWE-119 Medium
No
No
- 01.07.2020 SB2020070147
#VU34181 - Resource exhaustion
CVE-2020-12605
CWE-400 Medium
No
No
- 01.07.2020 SB2020070147
#VU34182 - Resource exhaustion
CVE-2020-12603
CWE-400 Medium
No
No
- 01.07.2020 SB2020070147
#VU145857 - Resource exhaustion
CVE-2020-8663
CWE-400 Medium
No
No
1.12.5, 1.13.3, 1.14.3 30.06.2020 SB2020063045
#VU25838 - Improper Access Control
CVE-2020-8664
CWE-284 High
No
No
1.12.3, 1.13.1 09.03.2020 SB2020030913
SB2020030524
#VU25837 - Resource exhaustion
CVE-2020-8661
CWE-400 Medium
No
No
1.12.3, 1.13.1 09.03.2020 SB2020030913
SB2020030524
#VU25836 - Improper Access Control
CVE-2020-8660
CWE-284 High
No
No
1.12.3, 1.13.1 09.03.2020 SB2020030913
SB2020030524
#VU25835 - Resource exhaustion
CVE-2020-8659
CWE-400 Medium
No
No
1.12.3, 1.13.1 09.03.2020 SB2020030913
SB2020030524
#VU145859 - Heap-based Buffer Overflow
CVE-2019-18801
CWE-122 Medium
No
No
1.12.2 10.12.2019 SB20191210104
#VU145858 - Improper input validation
CVE-2019-18838
CWE-20 Medium
No
No
1.12.2 10.12.2019 SB20191210104
#VU35101 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-18836
CWE-835 Medium
No
No
- 11.11.2019 SB2019111120
#VU145860 - Resource exhaustion
CWE-400 Medium
No
No
1.11.2 08.11.2019 SB2019110836
#VU135103 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-9901
CWE-22 High
No
No
1.9.1 08.11.2019 SB2019110835
#VU135104 - Improper input validation
CVE-2019-9900
CWE-20 High
No
No
1.9.1 08.11.2019 SB2019110835
#VU35171 - Resource exhaustion
CVE-2019-15226
CWE-400 Medium
No
No
- 09.10.2019 SB2019100962
#VU20201 - Resource exhaustion
CVE-2019-9514
CWE-400 Medium
No
No
1.11.1 13.08.2019 SB2019081326
SB2019082004
SB2019082502
and 79 more


Showing elements 121 - 140 out of 138