Lucene search

K
osvGoogleOSV:CVE-2020-35470
HistoryDec 15, 2020 - 1:15 a.m.

CVE-2020-35470

2020-12-1501:15:13
Google
osv.dev
3
envoy
logging
proxy protocol
tcp-proxy

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

34.6%

Envoy before 1.16.1 logs an incorrect downstream address because it considers only the directly connected peer, not the information in the proxy protocol header. This affects situations with tcp-proxy as the network filter (not HTTP filters).

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

34.6%

Related for OSV:CVE-2020-35470