CVE-2026-47205: Use After Free

Envoy is an open source edge and service proxy designed for cloud-native applications. From 1.36.0 until 1.36.9, 1.37.5, and 1.38.3, a Use-After-Free UAF vulnerability leading to a sudden segmentation fault exists in Envoy's extauthz HTTP filter when processing per-route authorization overrides...

envoy:h2_capture_direct_response_persistent_fuzz_test: Heap-use-after-free in Envoy::Http::ConnectionManagerImpl::resetAllStreams

Detailed Report: https://oss-fuzz.com/testcase?key=5145983787794432 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: h2capturedirectresponsepersistentfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x51500009d2c8 Crash State:...

envoy:h2_capture_direct_response_persistent_fuzz_test: Heap-use-after-free in Envoy::Http::ConnectionManagerImpl::resetAllStreams

Detailed Report: https://oss-fuzz.com/testcase?key=6676274437226496 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: h2capturedirectresponsepersistentfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address: 0x61500007edc8 Crash State:...

envoy:network_readfilter_fuzz_test: Heap-use-after-free in Envoy::Http::ConnectionManagerImpl::~ConnectionManagerImpl

Project: https://github.com/envoyproxy/envoy.git Detailed Report: https://oss-fuzz.com/testcase?key=5169683715981312 Project: envoy Fuzzing Engine: libFuzzer Fuzz Target: networkreadfilterfuzztest Job Type: libfuzzerasanenvoy Platform Id: linux Crash Type: Heap-use-after-free READ 8 Crash Address...

GHSA-X337-43MR-GG3H Ignite Realtime Openfire allows remote authenticated users to cause a denial of service

ConnectionManagerImpl.java in Ignite Realtime Openfire 3.4.5 allows remote authenticated users to cause a denial of service daemon outage by triggering large outgoing queues without reading messages...

CVE-2008-1728

ConnectionManagerImpl.java in Ignite Realtime Openfire 3.4.5 allows remote authenticated users to cause a denial of service daemon outage by triggering large outgoing queues without reading messages...

Design/Logic Flaw

ConnectionManagerImpl.java in Ignite Realtime Openfire 3.4.5 allows remote authenticated users to cause a denial of service daemon outage by triggering large outgoing queues without reading messages...

CVE-2008-1728

ConnectionManagerImpl.java in Ignite Realtime Openfire 3.4.5 allows remote authenticated users to cause a denial of service daemon outage by triggering large outgoing queues without reading messages...