Lucene search
China National Vulnerability DatabaseCNVD-2022-16290HistoryFeb 24, 2022 - 12:00 a.m.
Envoy Trust Management Issue Vulnerability (CNVD-2022-16290)
2022-02-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
18
envoy
trust management
vulnerability
type confusion error
default_validator.cc
certificate validation
subjectaltnames
cnvd-2022-16290
EPSS
0.001
Percentile
35.2%
Envoy is an open source distributed proxy server. Envoy has a trust management issue vulnerability that stems from a type confusion error in the default_validator.cc implementation used to implement the default certificate validation routines when handling subjectAltNames. no details of the vulnerability are available.
Related
prion
prion
Type confusion
2022-02-22 23:15:00
osv
osv
BIT-envoy-2022-21656
2024-03-06 10:56:05
CVE-2022-21656
2022-02-22 23:15:11
nvd
nvd
CVE-2022-21656
2022-02-22 23:15:11
cvelist
cvelist
CVE-2022-21656 X.509 subjectAltName matching bypass in Envoy
2022-02-22 22:25:11
cve
cve
CVE-2022-21656
2022-02-22 23:15:11
redhatcve
redhatcve
CVE-2022-21656
2022-02-23 06:31:08