0.001 Low
EPSS
Percentile
38.8%
A flaw was found in Envoy. The OAuth filter would try to invoke the remaining filters in the chain after emitting a local response, which triggers an ASSERT() in newer versions and corrupts memory on earlier versions.
bugzilla.redhat.com/show_bug.cgi?id=2088740
github.com/envoyproxy/envoy/security/advisories/GHSA-rww6-8h7g-8jf6
nvd.nist.gov/vuln/detail/CVE-2022-29228
www.cve.org/CVERecord?id=CVE-2022-29228