CVE-2024-45809

A flaw was found in Envoy. JWT filter will lead to a crash in Envoy when clearing the route cache with remote JWKs in the following cases: 1. Remote JWKs are used, which requires async header processing 2. clearroutecache is enabled on the provider 3. Header operations are enabled in JWT filter,...

Denial Of Service (DoS)

servicemesh-proxy is vulnerable to denial of service.The vulnerability exists due to the memory corruption in continueDecoding function in filter.cc, which allows an attacker to crash the application by providing a malicious input...

CVE-2022-29228: Reachable Assertion

Envoy is a cloud-native high-performance proxy. In versions prior to 1.22.1 the OAuth filter would try to invoke the remaining filters in the chain after emitting a local response, which triggers an ASSERT in newer versions and corrupts memory on earlier versions. continueDecoding shouldn’t ever ...