CVE-2020-35470

2020-12-1500:48:35

mitre

www.cve.org

envoy

logging

incorrect address

AI Score

8.6

Confidence

High

EPSS

0.001

Percentile

34.6%

JSON

Envoy before 1.16.1 logs an incorrect downstream address because it considers only the directly connected peer, not the information in the proxy protocol header. This affects situations with tcp-proxy as the network filter (not HTTP filters).

References

github.com/envoyproxy/envoy/compare/v1.16.0...v1.16.1

github.com/envoyproxy/envoy/issues/14087

github.com/envoyproxy/envoy/pull/14131